pkg-scaffold 3.2.0 → 3.3.2

package/LICENSE

@@ -1,21 +1,211 @@
-MIT License
-
-Copyright (c) 2026 DreamLong
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly declare otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+   ============================================================================
+   SPECIAL ATTRIBUTION REQUIREMENT
+   ============================================================================
+   Any redistribution of this software or derivative works MUST include the 
+   following attribution in a prominent location (e.g., README, about page, 
+   or CLI output):
+   
+   "The Original Code was made by DreamLongYT"
+   ============================================================================

package/NOTICE

@@ -0,0 +1,13 @@
+pkg-scaffold
+Copyright 2026 DreamLongYT
+
+The Original Code was made by DreamLongYT
+
+This product includes software developed at
+pkg-scaffold (https://github.com/DreamLongYT/pkg-scaffold).
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0

package/bin/cli.js

@@ -28,7 +28,7 @@ async function bootstrap() {
     program
       .name('pkg-scaffold')
       .description(ansis.cyan('Enterprise-Grade AST Syntax Refactoring & Self-Healing Engine'))
-      .version(packageJsonContent.version || '3.0.0');
+      .version(packageJsonContent.version || '3.3.2');
 
     program
       .option('-c, --cwd <path>', 'Specify the execution context root directory', process.cwd())
@@ -39,14 +39,15 @@ async function bootstrap() {
       .option('--workspace', 'Enable high-density workspace workspace/monorepo cluster mesh evaluation parsing', false)
       .option('--verbose', 'Toggle expanded trace telemetry for debug operational diagnostics', false)
       .option('-r, --run', 'Execute the primary operational pipeline loop', false)
-      .option('-y, --yes', 'Skip confirmation prompts and execute planned structural modifications automatically', false);
+      .option('-y, --yes', 'Skip confirmation prompts and execute planned structural modifications automatically', false)
+      .option('--timeout <ms>', 'Set execution timeout in milliseconds', '30000');
 
     program.parse(process.argv);
     const options = program.opts();
 
     const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
 
-    // --- Onboarding Check ---
+    // --- Onboarding Check (Skipped in Non-Interactive Mode) ---
     const targetCwd = path.resolve(options.cwd);
     const pkgJsonPath = path.join(targetCwd, 'package.json');
     const configDirPath = path.join(targetCwd, 'pkg-scaffold');
@@ -54,49 +55,49 @@ async function bootstrap() {
     let pkgJson;
     try {
       pkgJson = JSON.parse(await fs.readFile(pkgJsonPath, 'utf8'));
-    } catch (e) {
-      // No package.json found in target
-    }
+    } catch (e) {}
 
-    // 1. Ask to install script
-    if (pkgJson && !pkgJson.scripts?.['pkg-scaffold:run']) {
-      const answer = await rl.question(ansis.bold.yellow('❓ No "pkg-scaffold:run" script found in package.json. Install it? (y/n): '));
-      if (answer.toLowerCase() === 'y') {
-        pkgJson.scripts = pkgJson.scripts || {};
-        pkgJson.scripts['pkg-scaffold:run'] = 'pkg-scaffold --fix';
-        await fs.writeFile(pkgJsonPath, JSON.stringify(pkgJson, null, 2));
-        console.log(ansis.green('✅ "pkg-scaffold:run" script added to package.json.'));
+    let configInstalled = false;
+    if (!options.yes && !options.run) {
+      // 1. Ask to install script
+      if (pkgJson && !pkgJson.scripts?.['pkg-scaffold:run']) {
+        const answer = await rl.question(ansis.bold.yellow('❓ No "pkg-scaffold:run" script found in package.json. Install it? (y/n): '));
+        if (answer.toLowerCase() === 'y') {
+          pkgJson.scripts = pkgJson.scripts || {};
+          pkgJson.scripts['pkg-scaffold:run'] = 'pkg-scaffold --fix';
+          await fs.writeFile(pkgJsonPath, JSON.stringify(pkgJson, null, 2));
+          console.log(ansis.green('✅ "pkg-scaffold:run" script added to package.json.'));
+        }
       }
-    }
 
-    // 2. Ask to install config folder
-    let configInstalled = false;
-    try {
-      await fs.access(configDirPath);
-      configInstalled = true;
-    } catch (e) {
-      const answer = await rl.question(ansis.bold.yellow('❓ No "/pkg-scaffold" configuration folder found. Create it with defaults? (y/n): '));
-      if (answer.toLowerCase() === 'y') {
-        await fs.mkdir(configDirPath, { recursive: true });
-        await fs.mkdir(path.join(configDirPath, 'plugins'), { recursive: true });
-        const defaultConfig = {
-          interface: "CLI",
-          useBuiltinPlugins: true,
-          useCustomPlugins: true,
-          supportKnipPlugins: true,
-          options: { verbose: false, fastMode: true, selfHealing: true },
-          enabledPlugins: ["nextjs", "nuxt", "remix", "sveltekit", "astro"]
-        };
-        await fs.writeFile(path.join(configDirPath, 'config.json'), JSON.stringify(defaultConfig, null, 2));
-        console.log(ansis.green('✅ "/pkg-scaffold" folder and default config created.'));
+      // 2. Ask to install config folder
+      try {
+        await fs.access(configDirPath);
         configInstalled = true;
+      } catch (e) {
+        const answer = await rl.question(ansis.bold.yellow('❓ No "/pkg-scaffold" configuration folder found. Create it with defaults? (y/n): '));
+        if (answer.toLowerCase() === 'y') {
+          await fs.mkdir(configDirPath, { recursive: true });
+          await fs.mkdir(path.join(configDirPath, 'plugins'), { recursive: true });
+          const defaultConfig = {
+            interface: "CLI",
+            useBuiltinPlugins: true,
+            useCustomPlugins: true,
+            supportKnipPlugins: true,
+            options: { verbose: false, fastMode: true, selfHealing: true },
+            enabledPlugins: ["nextjs", "nuxt", "remix", "sveltekit", "astro"]
+          };
+          await fs.writeFile(path.join(configDirPath, 'config.json'), JSON.stringify(defaultConfig, null, 2));
+          console.log(ansis.green('✅ "/pkg-scaffold" folder and default config created.'));
+          configInstalled = true;
+        }
       }
-    }
 
-    if (pkgJson?.scripts?.['pkg-scaffold:run'] || configInstalled) {
-      console.log(ansis.bold.cyan('\n🚀 Setup complete! To start the engine, run:'));
-      console.log(ansis.white(`   - pkg-scaffold -r`));
-      console.log(ansis.white(`   - npm run pkg-scaffold:run\n`));
+      if (pkgJson?.scripts?.['pkg-scaffold:run'] || configInstalled) {
+        console.log(ansis.bold.cyan('\n🚀 Setup complete! To start the engine, run:'));
+        console.log(ansis.white(`   - pkg-scaffold -r`));
+        console.log(ansis.white(`   - npm run pkg-scaffold:run\n`));
+      }
     }
 
     rl.close();
@@ -113,7 +114,6 @@ async function bootstrap() {
     const finalInterface = localConfig.interface || 'CLI';
     if (finalInterface === 'GUI') {
       console.log(ansis.bold.magenta('🎨 GUI Mode Detected. Starting Web Interface...'));
-      // In a real scenario, we'd start a local server or Electron here
       return;
     }
 
@@ -122,31 +122,23 @@ async function bootstrap() {
       return;
     }
 
-    console.log(ansis.bold.green(`\n📦 pkg-scaffold v${packageJsonContent.version || '3.1.0'} Engine Activation`));
+    // --- Timeout Handling ---
+    const timeoutMs = parseInt(options.timeout);
+    const timeoutTimer = setTimeout(() => {
+      console.error(ansis.bold.red(`\n🚨 Execution Timeout: The process exceeded the limit of ${timeoutMs}ms.`));
+      process.exit(1);
+    }, timeoutMs);
+    timeoutTimer.unref(); // Allow process to exit if work finishes
+
+    console.log(ansis.bold.green(`\n📦 pkg-scaffold v${packageJsonContent.version || '3.3.2'} Engine Activation`));
     console.log(ansis.dim('------------------------------------------------------------'));
     console.log(`${ansis.bold('Target Workspace Root :')} ${ansis.blue(path.resolve(options.cwd))}`);
     console.log(`${ansis.bold('Refactoring Mode     :')} ${options.fix ? ansis.yellow('Active Fixing & Self-Healing Enabled') : ansis.gray('Dry-Run Reporting Only')}`);
     console.log(`${ansis.bold('Validation Sandbox   :')} ${ansis.magenta(options.testCommand)}`);
     console.log(ansis.dim('------------------------------------------------------------\n'));
 
-    const engineModulePath = path.resolve(__dirname, '../src/EngineContext.js');
-    
-    try {
-      await fs.access(engineModulePath);
-    } catch {
-      console.error(ansis.red(`🚨 Execution Fault: Core engine architecture files missing. Ensure src/ directory layout is fully generated.`));
-      process.exit(1);
-    }
-
-    // Lazy load execution context wrapper to align with domain initialization
     const { RefactoringEngine } = await import('../src/index.js');
 
-    if (!RefactoringEngine) {
-      console.error(ansis.red('🚨 Architecture Boundary Error: RefactoringEngine could not be resolved from code topology channels.'));
-      process.exit(1);
-    }
-
-    // Ensure cwd is always an absolute path regardless of how it was passed (e.g., '--cwd .')
     const engine = new RefactoringEngine({
       cwd: path.resolve(options.cwd),
       autoFix: options.fix,
@@ -158,7 +150,8 @@ async function bootstrap() {
     });
 
     await engine.run();
-
+    
+    clearTimeout(timeoutTimer);
     console.log(ansis.bold.green('\n✨ Core cycle execution completed successfully. Structural layout is clean.'));
     process.exit(0);
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pkg-scaffold",
-  "version": "3.2.0",
-  "description": "The ultimate enterprise-grade codebase janitor. Faster than Knip v6 with OXC integration, type-aware analysis, and self-healing capabilities.",
+  "version": "3.3.2",
+  "description": "The Ultimate Enterprise Codebase Janitor. Faster than Knip with OXC integration, type-aware analysis, and self-healing capabilities. Fully standalone - solving what Knip cannot.",
   "type": "module",
   "main": "index.js",
   "bin": {
@@ -23,7 +23,6 @@
     "setup",
     "dx",
     "cli",
-    "deprecated-check",
     "automation",
     "unused-packages",
     "ghost-dependencies",
@@ -31,10 +30,14 @@
     "dependency-analysis",
     "dependency-audit",
     "missing-imports",
-    "dead-code"
+    "dead-code",
+    "self-healing",
+    "ast",
+    "oxc",
+    "circular-dependencies"
   ],
   "author": "DreamLongYT",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/DreamLongYT/pkg-scaffold.git"
@@ -63,7 +66,6 @@
   "devDependencies": {
     "@types/node": "^25.9.3",
     "express": "^5.2.1",
-    "knip": "^6.16.1",
     "lodash": "^4.18.1",
     "typescript": "^6.0.3",
     "vitepress": "^1.6.4"

package/src/EngineContext.js

@@ -1,6 +1,6 @@
 /**
  * ============================================================================
- * 📦 pkg-scaffold v3.0.0: Enterprise In-Memory Codebase State Manifest
+ * 📦 pkg-scaffold v3.3.0: Enterprise In-Memory Codebase State Manifest
  * ============================================================================
  * Implements a high-density, centralized graph database context for tracking
  * software engineering debt, dependencies, types, and vulnerabilities.
@@ -145,7 +145,7 @@ export class EngineContext {
       unusedDependenciesCount: 0
     };
     this.usedExternalPackages = new Set(); // Global set of used npm packages
-    this.manifestDependencies = new Map(); // Package.json path -> { dependencies, devDependencies }
+    this.manifestDependencies = new Map(); // Package.json path -> { dependencies, devDependencies, peerDependencies, optionalDependencies }
   }
 
   /**
@@ -256,20 +256,17 @@ export class EngineContext {
 
       const relativePath = path.relative(this.cwd, filePath);
 
-      // Category A: Completely orphaned components (no references, not library/framework entries)
-      // A file with ANY @scaffold-suppress directive is considered intentionally retained and must
-      // never be flagged as orphaned, even if no other file imports it directly.
+      // Category A: Completely orphaned components
       const fileHasSuppressDirective = node.localSuppressedRules.size > 0;
       if (node.incomingEdges.size === 0 && !node.isLibraryEntry && !node.isFrameworkContract && !fileHasSuppressDirective) {
         summary.structuralIssuesDetected.deadFiles.push(relativePath);
-        continue; // An orphaned file implies all internal sub-exports are dead; skip sub-checks
+        continue;
       }
 
-      // Category B: Dead Named Exports inside active files
+      // Category B: Dead Named Exports
       for (const [exportName, meta] of node.internalExports.entries()) {
         this.metrics.totalSymbolsAnalyzed++;
         
-        // Skip entry configurations, global suppresses, and type-suppressed symbols
         if (exportName === 'default' || 
             this.globallyIgnoredSymbols.has(exportName) || 
             node.localSuppressedRules.has(exportName)) {
@@ -288,7 +285,7 @@ export class EngineContext {
         }
       }
 
-      // Category C: High-Entropy Password / Key Hardcode Vulnerabilities
+      // Category C: Security Vulnerabilities
       if (node.securityThreats && node.securityThreats.length > 0) {
         node.securityThreats.forEach(threat => {
           summary.structuralIssuesDetected.securityThreats.push({
@@ -302,21 +299,28 @@ export class EngineContext {
       }
     }
 
-    // Category D: Unused Dependencies Audit
+    // Category D: Unused Dependencies Audit (Enhanced Classification)
     for (const [manifestPath, manifestData] of this.manifestDependencies.entries()) {
       const relativeManifest = path.relative(this.cwd, manifestPath);
       
-      // We only audit 'dependencies' for now as devDependencies are harder to track (test files, tools, etc.)
-      for (const dep of manifestData.dependencies) {
-        if (!this.usedExternalPackages.has(dep)) {
-          summary.structuralIssuesDetected.unusedDependencies.push({
-            manifest: relativeManifest,
-            package: dep,
-            type: 'dependency'
-          });
-          this.metrics.unusedDependenciesCount++;
+      const checkDeps = (deps, type) => {
+        if (!deps) return;
+        for (const dep of deps) {
+          if (!this.usedExternalPackages.has(dep)) {
+            summary.structuralIssuesDetected.unusedDependencies.push({
+              manifest: relativeManifest,
+              package: dep,
+              type: type
+            });
+            this.metrics.unusedDependenciesCount++;
+          }
         }
-      }
+      };
+
+      checkDeps(manifestData.dependencies, 'dependency');
+      checkDeps(manifestData.devDependencies, 'devDependency');
+      checkDeps(manifestData.peerDependencies, 'peerDependency');
+      checkDeps(manifestData.optionalDependencies, 'optionalDependency');
     }
 
     return summary;