pr-checkmate 1.20.4 → 1.20.7

package/.eslintrc.js

@@ -59,6 +59,14 @@ module.exports = {
     '@typescript-eslint/explicit-function-return-type': ['warn'],
     '@typescript-eslint/no-explicit-any': ['warn'],
     '@typescript-eslint/no-floating-promises': ['error'],
+    '@typescript-eslint/no-unused-expressions': [
+      'error',
+      {
+        allowShortCircuit: false,
+        allowTernary: false,
+        allowTaggedTemplates: false,
+      },
+    ],
     'space-before-function-paren': 'off',
     'operator-linebreak': 'off',
     'max-len': ['warn', { code: 100 }],

package/dist/config/pr-checkmate-workflow.yml

@@ -145,3 +145,100 @@ jobs:
       - name: Run Dependency Check
         run: npx pr-checkmate dependencies
         continue-on-error: true
+
+  circular-deps:
+    name: Circular Dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run Circular Dependency Check
+        run: npx pr-checkmate circular
+        continue-on-error: true
+
+  license-check:
+    name: License Check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run License Check
+        run: npx pr-checkmate license
+        continue-on-error: true
+
+  pr-size:
+    name: PR Size
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Check PR Size
+        run: npx pr-checkmate pr-size
+        continue-on-error: true
+
+  pr-title:
+    name: PR Title
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Check PR Title
+        run: npx pr-checkmate pr-title
+        continue-on-error: true
+
+  outdated-deps:
+    name: Outdated Dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Check Outdated Dependencies
+        run: npx pr-checkmate outdated
+        continue-on-error: true

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runNpmAudit = exports.runSecurityScan = exports.runSpellcheck = exports.runPrettier = exports.runDependencyCheck = exports.runLint = exports.hasLocalConfig = exports.getPackageConfigPath = exports.getSourcePath = void 0;
+exports.runOutdatedDeps = exports.runPrTitleLint = exports.runPrSizeCheck = exports.runLicenseCheck = exports.runCircularDeps = exports.runNpmAudit = exports.runSecurityScan = exports.runSpellcheck = exports.runPrettier = exports.runDependencyCheck = exports.runLint = exports.hasLocalConfig = exports.getPackageConfigPath = exports.getSourcePath = void 0;
 exports.runAllChecks = runAllChecks;
 exports.runChecks = runChecks;
 /**
@@ -14,6 +14,12 @@ const prettier_autoformat_1 = require("./scripts/prettier-autoformat");
 const spellcheck_1 = require("./scripts/spellcheck");
 const security_1 = require("./scripts/security");
 const npm_audit_1 = require("./scripts/npm-audit");
+const circular_deps_1 = require("./scripts/circular-deps");
+const license_check_1 = require("./scripts/license-check");
+const pr_size_check_1 = require("./scripts/pr-size-check");
+const pr_title_lint_1 = require("./scripts/pr-title-lint");
+const outdated_deps_1 = require("./scripts/outdated-deps");
+const utils_1 = require("./utils");
 var config_1 = require("./config");
 Object.defineProperty(exports, "getSourcePath", { enumerable: true, get: function () { return config_1.getSourcePath; } });
 Object.defineProperty(exports, "getPackageConfigPath", { enumerable: true, get: function () { return config_1.getPackageConfigPath; } });
@@ -30,28 +36,66 @@ var security_2 = require("./scripts/security");
 Object.defineProperty(exports, "runSecurityScan", { enumerable: true, get: function () { return security_2.runSecurityScan; } });
 var npm_audit_2 = require("./scripts/npm-audit");
 Object.defineProperty(exports, "runNpmAudit", { enumerable: true, get: function () { return npm_audit_2.runNpmAudit; } });
+var circular_deps_2 = require("./scripts/circular-deps");
+Object.defineProperty(exports, "runCircularDeps", { enumerable: true, get: function () { return circular_deps_2.runCircularDeps; } });
+var license_check_2 = require("./scripts/license-check");
+Object.defineProperty(exports, "runLicenseCheck", { enumerable: true, get: function () { return license_check_2.runLicenseCheck; } });
+var pr_size_check_2 = require("./scripts/pr-size-check");
+Object.defineProperty(exports, "runPrSizeCheck", { enumerable: true, get: function () { return pr_size_check_2.runPrSizeCheck; } });
+var pr_title_lint_2 = require("./scripts/pr-title-lint");
+Object.defineProperty(exports, "runPrTitleLint", { enumerable: true, get: function () { return pr_title_lint_2.runPrTitleLint; } });
+var outdated_deps_2 = require("./scripts/outdated-deps");
+Object.defineProperty(exports, "runOutdatedDeps", { enumerable: true, get: function () { return outdated_deps_2.runOutdatedDeps; } });
 /**
- * Run all checks sequentially
- * @returns Promise that resolves when all checks complete
+ * Run all checks with parallel execution where possible.
+ * Blocking: lint, deps, npm-audit, security, circular-deps, license.
+ * Informational: pr-size, pr-title, outdated, spellcheck.
+ * Last: prettier (writes files).
  */
 async function runAllChecks() {
-    await (0, lint_1.runLint)();
-    await (0, dependency_check_1.runDependencyCheck)();
-    await (0, npm_audit_1.runNpmAudit)();
-    await (0, spellcheck_1.runSpellcheck)();
-    await (0, security_1.runSecurityScan)();
-    await (0, prettier_autoformat_1.runPrettier)(); // Last to commit any fixes
+    // Phase 1: blocking checks in parallel
+    await Promise.all([
+        (0, lint_1.runLint)(),
+        (0, dependency_check_1.runDependencyCheck)(),
+        (0, npm_audit_1.runNpmAudit)(),
+        (0, security_1.runSecurityScan)(),
+        (0, circular_deps_1.runCircularDeps)(),
+        (0, license_check_1.runLicenseCheck)(),
+    ]);
+    // Phase 2: informational checks in parallel
+    await Promise.all([
+        (0, pr_size_check_1.runPrSizeCheck)(),
+        (0, pr_title_lint_1.runPrTitleLint)(),
+        (0, outdated_deps_1.runOutdatedDeps)(),
+        (0, spellcheck_1.runSpellcheck)().catch(() => utils_1.logger.warn('⚠️ Spellcheck found issues, continuing...')),
+    ]);
+    // Phase 3: prettier last — writes files
+    await (0, prettier_autoformat_1.runPrettier)();
 }
 /**
- * Run checks based on configuration
+ * Run checks based on configuration (programmatic API).
  */
 async function runChecks(config = {}) {
     if (!config.skipLint)
         await (0, lint_1.runLint)();
     if (!config.skipDeps)
         await (0, dependency_check_1.runDependencyCheck)();
+    if (!config.skipSecurity)
+        await (0, security_1.runSecurityScan)();
+    if (!config.skipNpmAudit)
+        await (0, npm_audit_1.runNpmAudit)();
+    if (!config.skipCircularDeps)
+        await (0, circular_deps_1.runCircularDeps)();
+    if (!config.skipLicense)
+        await (0, license_check_1.runLicenseCheck)();
+    if (!config.skipPrSize)
+        await (0, pr_size_check_1.runPrSizeCheck)();
+    if (!config.skipPrTitle)
+        await (0, pr_title_lint_1.runPrTitleLint)();
+    if (!config.skipOutdated)
+        await (0, outdated_deps_1.runOutdatedDeps)();
     if (!config.skipSpell)
         await (0, spellcheck_1.runSpellcheck)();
-    if (!config.skipFormat && config.autoCommit)
+    if (!config.skipFormat)
         await (0, prettier_autoformat_1.runPrettier)();
 }

package/dist/init.js

@@ -1,5 +1,4 @@
 "use strict";
-/* eslint-disable @typescript-eslint/no-explicit-any */
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -49,6 +48,7 @@ async function init() {
                 type: 'input',
                 name: 'manualPath',
                 message: 'Enter path:',
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
                 when: (a) => a.sourcePath === 'Enter manually',
                 validate: (input) => input.trim().length > 0 || 'Cannot be empty',
             },

package/dist/scripts/circular-deps.js

@@ -0,0 +1,34 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runCircularDeps = runCircularDeps;
+const execa_1 = require("execa");
+const utils_1 = require("../utils");
+const config_1 = require("../config");
+const node_path_1 = __importDefault(require("node:path"));
+async function runCircularDeps() {
+    utils_1.logger.info('[runCircularDeps]: 🔄 Checking for circular dependencies...');
+    const sourcePath = (0, config_1.getSourcePath)();
+    const pattern = node_path_1.default.join(process.cwd(), sourcePath, '**/*.{ts,tsx,js,jsx}');
+    try {
+        const result = await (0, execa_1.execa)('npx', ['dpdm', '--no-warning', '--no-tree', '--circular', pattern], {
+            reject: false,
+        });
+        const output = (result.stdout + result.stderr).trim();
+        if (output.toLowerCase().includes('circular')) {
+            utils_1.logger.error('[runCircularDeps]: ❌ Circular dependencies detected:');
+            utils_1.logger.error(output);
+            throw new Error('Circular dependencies found');
+        }
+        utils_1.logger.info('[runCircularDeps]: ✅ No circular dependencies found');
+    }
+    catch (err) {
+        const error = err;
+        if (error.message === 'Circular dependencies found')
+            throw err;
+        utils_1.logger.error(`[runCircularDeps]: ❌ Circular dep check failed\n${err}`);
+        throw err;
+    }
+}

package/dist/scripts/dependency-check.js

@@ -4,33 +4,42 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runDependencyCheck = runDependencyCheck;
-const config_1 = require("../config");
+const execa_1 = require("execa");
 const utils_1 = require("../utils");
 const node_path_1 = __importDefault(require("node:path"));
 const node_fs_1 = __importDefault(require("node:fs"));
-/**
- * Basic dependency checks with sourcePath support
- */
 async function runDependencyCheck() {
-    utils_1.logger.info('📦 Checking dependencies...');
+    utils_1.logger.info('[runDependencyCheck]: 📦 Checking dependencies...');
     const projectRoot = process.cwd();
-    const packageJsonPath = node_path_1.default.join(projectRoot, 'package.json');
-    if (!node_fs_1.default.existsSync(packageJsonPath)) {
-        utils_1.logger.warn('[runDependencyCheck]: ⚠️ No package.json — skipping dependency check');
+    if (!node_fs_1.default.existsSync(node_path_1.default.join(projectRoot, 'package.json'))) {
+        utils_1.logger.warn('[runDependencyCheck]: ⚠️ No package.json found, skipping');
         return;
     }
-    const sourcePath = (0, config_1.getSourcePath)();
-    const sourceFolder = node_path_1.default.join(projectRoot, sourcePath);
-    if (!node_fs_1.default.existsSync(sourceFolder)) {
-        utils_1.logger.warn(`[runDependencyCheck]: ⚠️ Source folder "${sourcePath}" not found — skipping deeper checks`);
-        return;
+    try {
+        const { stdout } = await (0, execa_1.execa)('npx', ['depcheck', '--json'], { cwd: projectRoot });
+        const result = JSON.parse(stdout);
+        const unused = result.dependencies ?? [];
+        const missing = Object.keys(result.missing ?? {});
+        if (unused.length === 0 && missing.length === 0) {
+            utils_1.logger.info('[runDependencyCheck]: ✅ Dependencies are clean');
+            return;
+        }
+        if (unused.length > 0) {
+            utils_1.logger.warn(`[runDependencyCheck]: ⚠️ ${unused.length} unused dependency(ies):`);
+            unused.forEach(dep => utils_1.logger.warn(`  ${dep}`));
+        }
+        if (missing.length > 0) {
+            utils_1.logger.error(`[runDependencyCheck]: ❌ ${missing.length} missing dependency(ies):`);
+            missing.forEach(dep => utils_1.logger.error(`  ${dep} (used in: ${result.missing[dep]?.join(', ')})`));
+            throw new Error(`Missing dependencies: ${missing.join(', ')}`);
+        }
+        // Unused deps are warnings — don't block the build
     }
-    const ignored = config_1.IGNORE_PATTERNS.some(pattern => {
-        const clean = pattern.replace(/\*\*/g, '').replace(/\//g, '').trim();
-        return clean && sourceFolder.includes(clean);
-    });
-    if (ignored) {
-        utils_1.logger.warn('[runDependencyCheck]: ⚠️ Source path contains ignored directories');
+    catch (err) {
+        const error = err;
+        if (error.message?.startsWith('Missing dependencies'))
+            throw err;
+        utils_1.logger.error(`[runDependencyCheck]: ❌ Dependency check failed\n${err}`);
+        throw err;
     }
-    utils_1.logger.info('[runDependencyCheck]: ✅ Dependencies OK');
 }

package/dist/scripts/index.js

@@ -20,6 +20,11 @@ const prettier_autoformat_1 = require("./prettier-autoformat");
 const spellcheck_1 = require("./spellcheck");
 const security_1 = require("./security");
 const npm_audit_1 = require("./npm-audit");
+const circular_deps_1 = require("./circular-deps");
+const license_check_1 = require("./license-check");
+const pr_size_check_1 = require("./pr-size-check");
+const pr_title_lint_1 = require("./pr-title-lint");
+const outdated_deps_1 = require("./outdated-deps");
 const utils_1 = require("../utils");
 const lint_1 = require("./lint");
 __exportStar(require("./dependency-check"), exports);
@@ -27,32 +32,45 @@ __exportStar(require("./lint"), exports);
 __exportStar(require("./prettier-autoformat"), exports);
 __exportStar(require("./spellcheck"), exports);
 __exportStar(require("./security"), exports);
+__exportStar(require("./circular-deps"), exports);
+__exportStar(require("./license-check"), exports);
+__exportStar(require("./pr-size-check"), exports);
+__exportStar(require("./pr-title-lint"), exports);
+__exportStar(require("./outdated-deps"), exports);
 async function runJob(jobName) {
     utils_1.logger.info(`[runJob]: 🚀 Running job: ${jobName}`);
     try {
         switch (jobName) {
             case 'all':
-                await (0, lint_1.runLint)();
-                await (0, dependency_check_1.runDependencyCheck)();
-                await (0, security_1.runSecurityScan)();
-                await (0, npm_audit_1.runNpmAudit)();
+                // Phase 1: blocking checks in parallel
+                await Promise.all([
+                    (0, lint_1.runLint)(),
+                    (0, dependency_check_1.runDependencyCheck)(),
+                    (0, npm_audit_1.runNpmAudit)(),
+                    (0, security_1.runSecurityScan)(),
+                    (0, circular_deps_1.runCircularDeps)(),
+                    (0, license_check_1.runLicenseCheck)(),
+                ]);
+                // Phase 2: informational checks in parallel (never block)
+                await Promise.all([
+                    (0, pr_size_check_1.runPrSizeCheck)(),
+                    (0, pr_title_lint_1.runPrTitleLint)(),
+                    (0, outdated_deps_1.runOutdatedDeps)(),
+                    (0, spellcheck_1.runSpellcheck)().catch(() => utils_1.logger.warn('⚠️ Spellcheck found issues, continuing...')),
+                ]);
+                // Phase 3: prettier last — writes files
                 try {
                     await (0, prettier_autoformat_1.runPrettier)();
                 }
                 catch {
                     utils_1.logger.warn('⚠️ Prettier failed, continuing...');
                 }
-                try {
-                    await (0, spellcheck_1.runSpellcheck)();
-                }
-                catch {
-                    utils_1.logger.warn('⚠️ Spellcheck failed, continuing...');
-                }
                 break;
             case 'lint':
                 await (0, lint_1.runLint)();
                 break;
             case 'deps':
+            case 'dependencies':
                 await (0, dependency_check_1.runDependencyCheck)();
                 break;
             case 'npm-audit':
@@ -67,8 +85,23 @@ async function runJob(jobName) {
             case 'security':
                 await (0, security_1.runSecurityScan)();
                 break;
+            case 'circular':
+                await (0, circular_deps_1.runCircularDeps)();
+                break;
+            case 'license':
+                await (0, license_check_1.runLicenseCheck)();
+                break;
+            case 'pr-size':
+                await (0, pr_size_check_1.runPrSizeCheck)();
+                break;
+            case 'pr-title':
+                await (0, pr_title_lint_1.runPrTitleLint)();
+                break;
+            case 'outdated':
+                await (0, outdated_deps_1.runOutdatedDeps)();
+                break;
             default:
-                utils_1.logger.warn(`[runJob]: Unknown job "${jobName}". Available: all, lint, deps, prettier, spellcheck`);
+                utils_1.logger.warn(`[runJob]: Unknown job "${jobName}". Available: all, lint, deps, npm-audit, prettier, spellcheck, security, circular, license, pr-size, pr-title, outdated`);
         }
     }
     catch (err) {

package/dist/scripts/license-check.js

@@ -0,0 +1,44 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runLicenseCheck = runLicenseCheck;
+const execa_1 = require("execa");
+const utils_1 = require("../utils");
+const node_path_1 = __importDefault(require("node:path"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const FORBIDDEN_LICENSES = ['GPL-2.0', 'GPL-3.0', 'AGPL-3.0', 'LGPL-2.0', 'LGPL-2.1', 'LGPL-3.0'];
+async function runLicenseCheck() {
+    utils_1.logger.info('[runLicenseCheck]: 📄 Checking dependency licenses...');
+    if (!node_fs_1.default.existsSync(node_path_1.default.join(process.cwd(), 'package.json'))) {
+        utils_1.logger.warn('[runLicenseCheck]: ⚠️ No package.json found, skipping');
+        return;
+    }
+    try {
+        const { stdout } = await (0, execa_1.execa)('npx', ['license-checker', '--json', '--production'], {
+            cwd: process.cwd(),
+        });
+        const licenses = JSON.parse(stdout);
+        const violations = [];
+        for (const [pkg, info] of Object.entries(licenses)) {
+            const license = info.licenses ?? '';
+            if (FORBIDDEN_LICENSES.some(f => license.includes(f))) {
+                violations.push(`  ${pkg}: ${license}`);
+            }
+        }
+        if (violations.length > 0) {
+            utils_1.logger.error(`[runLicenseCheck]: ❌ ${violations.length} forbidden license(s) found:`);
+            violations.forEach(v => utils_1.logger.error(v));
+            throw new Error(`License violations: ${violations.length}`);
+        }
+        utils_1.logger.info('[runLicenseCheck]: ✅ All licenses are compliant');
+    }
+    catch (err) {
+        const error = err;
+        if (error.message?.startsWith('License violations'))
+            throw err;
+        utils_1.logger.error(`[runLicenseCheck]: ❌ License check failed\n${err}`);
+        throw err;
+    }
+}

package/dist/scripts/lint.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.runLint = runLint;
 const config_1 = require("../config");
 const utils_1 = require("../utils");
+const delta_1 = require("../utils/delta");
 const execa_1 = require("execa");
 const node_path_1 = __importDefault(require("node:path"));
 /**
@@ -26,6 +27,8 @@ async function runLint() {
     const projectRoot = process.cwd();
     const sourcePath = (0, config_1.getSourcePath)();
     const sourceFullPath = node_path_1.default.join(projectRoot, sourcePath);
+    const changedFiles = await (0, delta_1.getChangedFiles)(['.ts', '.tsx', '.js', '.jsx']);
+    const targets = changedFiles ?? [sourceFullPath];
     const hasLocal = (0, config_1.hasLocalConfig)([
         'eslint.config.mjs',
         'eslint.config.js',
@@ -36,24 +39,16 @@ async function runLint() {
     let args;
     if (hasLocal) {
         utils_1.logger.info(`[runLint]: 📋 Using local ESLint config (checking: ${sourcePath})`);
-        args = ['eslint', sourceFullPath, '--ext', '.ts,.tsx,.js,.jsx', '--fix'];
+        args = ['eslint', ...targets, '--ext', '.ts,.tsx,.js,.jsx', '--fix'];
     }
     else {
-        utils_1.logger.info(`📦 Using pr-checkmate ESLint config (checking: ${sourcePath})`);
+        utils_1.logger.info(`[runLint]: 📦 Using pr-checkmate ESLint config (checking: ${sourcePath})`);
         // Detect ESLint version and choose appropriate config
         const eslintVersion = await getESLintMajorVersion();
         const configFile = eslintVersion >= 9 ? 'eslint.config.mjs' : '.eslintrc.js';
         const configPath = (0, config_1.getPackageConfigPath)(configFile);
         utils_1.logger.info(`[runLint]: 📋 Detected ESLint v${eslintVersion}, using ${configFile}`);
-        args = [
-            'eslint',
-            sourceFullPath,
-            '--ext',
-            '.ts,.tsx,.js,.jsx',
-            '--fix',
-            '--config',
-            configPath,
-        ];
+        args = ['eslint', ...targets, '--ext', '.ts,.tsx,.js,.jsx', '--fix', '--config', configPath];
     }
     config_1.IGNORE_PATTERNS.forEach(p => args.push('--ignore-pattern', p));
     try {

package/dist/scripts/npm-audit.js

@@ -7,9 +7,7 @@ exports.runNpmAudit = runNpmAudit;
 const utils_1 = require("../utils");
 const node_path_1 = __importDefault(require("node:path"));
 const node_fs_1 = __importDefault(require("node:fs"));
-const node_child_process_1 = require("node:child_process");
-const node_util_1 = require("node:util");
-const execAsync = (0, node_util_1.promisify)(node_child_process_1.exec);
+const execa_1 = require("execa");
 /**
  * Run npm audit on the current project
  */
@@ -22,15 +20,13 @@ async function runNpmAudit() {
         return;
     }
     try {
-        const { stdout, stderr } = await execAsync('npm audit --audit-level=moderate', {
+        const { stdout, stderr } = await (0, execa_1.execa)('npm', ['audit', '--audit-level=moderate'], {
             cwd: projectRoot,
         });
-        if (stdout) {
+        if (stdout)
             utils_1.logger.info(stdout);
-        }
-        if (stderr) {
+        if (stderr)
             utils_1.logger.warn(stderr);
-        }
         utils_1.logger.info('[runNpmAudit]: ✅ NPM audit finished successfully');
     }
     catch (error) {
@@ -42,5 +38,6 @@ async function runNpmAudit() {
             utils_1.logger.warn(err.stderr);
         if (!err.stdout && !err.stderr)
             utils_1.logger.error(err.message);
+        throw err;
     }
 }

package/dist/scripts/outdated-deps.js

@@ -0,0 +1,52 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runOutdatedDeps = runOutdatedDeps;
+const execa_1 = require("execa");
+const utils_1 = require("../utils");
+const node_path_1 = __importDefault(require("node:path"));
+const node_fs_1 = __importDefault(require("node:fs"));
+async function runOutdatedDeps() {
+    utils_1.logger.info('[runOutdatedDeps]: 📅 Checking for outdated dependencies...');
+    if (!node_fs_1.default.existsSync(node_path_1.default.join(process.cwd(), 'package.json'))) {
+        utils_1.logger.warn('[runOutdatedDeps]: ⚠️ No package.json found, skipping');
+        return;
+    }
+    // npm outdated exits with code 1 when outdated packages exist — use reject:false
+    const result = await (0, execa_1.execa)('npm', ['outdated', '--json'], { reject: false });
+    if (!result.stdout?.trim()) {
+        utils_1.logger.info('[runOutdatedDeps]: ✅ All dependencies are up to date');
+        return;
+    }
+    let outdated;
+    try {
+        outdated = JSON.parse(result.stdout);
+    }
+    catch {
+        utils_1.logger.info('[runOutdatedDeps]: ✅ All dependencies are up to date');
+        return;
+    }
+    const entries = Object.entries(outdated);
+    if (entries.length === 0) {
+        utils_1.logger.info('[runOutdatedDeps]: ✅ All dependencies are up to date');
+        return;
+    }
+    const majorBehind = entries.filter(([, info]) => {
+        const current = parseInt(info.current?.split('.')[0] ?? '0');
+        const latest = parseInt(info.latest?.split('.')[0] ?? '0');
+        return latest > current;
+    });
+    const minorBehind = entries.length - majorBehind.length;
+    if (majorBehind.length > 0) {
+        utils_1.logger.warn(`[runOutdatedDeps]: ⚠️ ${majorBehind.length} package(s) are major versions behind:`);
+        majorBehind.forEach(([pkg, info]) => {
+            utils_1.logger.warn(`  ${pkg}: ${info.current} → ${info.latest}`);
+        });
+    }
+    if (minorBehind > 0) {
+        utils_1.logger.info(`[runOutdatedDeps]: ℹ️ ${minorBehind} package(s) have minor/patch updates available`);
+    }
+    // informational only — never throws
+}

package/dist/scripts/pr-size-check.js

@@ -0,0 +1,56 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runPrSizeCheck = runPrSizeCheck;
+const execa_1 = require("execa");
+const utils_1 = require("../utils");
+const node_fs_1 = __importDefault(require("node:fs"));
+const WARN_FILES = 50;
+const WARN_LINES = 1000;
+function readBaseSha() {
+    const eventName = process.env.GITHUB_EVENT_NAME;
+    const eventPath = process.env.GITHUB_EVENT_PATH;
+    if (eventName !== 'pull_request' || !eventPath || !node_fs_1.default.existsSync(eventPath)) {
+        return null;
+    }
+    try {
+        const event = JSON.parse(node_fs_1.default.readFileSync(eventPath, 'utf-8'));
+        return event?.pull_request?.base?.sha ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+async function runPrSizeCheck() {
+    utils_1.logger.info('[runPrSizeCheck]: 📏 Checking PR size...');
+    const baseSha = readBaseSha();
+    if (!baseSha) {
+        utils_1.logger.info('[runPrSizeCheck]: ℹ️ Not in GitHub PR context, skipping');
+        return;
+    }
+    try {
+        const { stdout } = await (0, execa_1.execa)('git', ['diff', '--shortstat', baseSha, 'HEAD']);
+        // "5 files changed, 123 insertions(+), 45 deletions(-)"
+        const filesMatch = stdout.match(/(\d+) files? changed/);
+        const insertions = stdout.match(/(\d+) insertion/);
+        const deletions = stdout.match(/(\d+) deletion/);
+        const fileCount = filesMatch ? parseInt(filesMatch[1]) : 0;
+        const lines = (insertions ? parseInt(insertions[1]) : 0) + (deletions ? parseInt(deletions[1]) : 0);
+        utils_1.logger.info(`[runPrSizeCheck]: 📊 ${fileCount} files changed, ${lines} lines`);
+        if (fileCount > WARN_FILES) {
+            utils_1.logger.warn(`[runPrSizeCheck]: ⚠️ Large PR: ${fileCount} files changed (recommended < ${WARN_FILES})`);
+        }
+        if (lines > WARN_LINES) {
+            utils_1.logger.warn(`[runPrSizeCheck]: ⚠️ Large PR: ${lines} lines changed (recommended < ${WARN_LINES})`);
+        }
+        if (fileCount <= WARN_FILES && lines <= WARN_LINES) {
+            utils_1.logger.info('[runPrSizeCheck]: ✅ PR size is within limits');
+        }
+    }
+    catch (err) {
+        utils_1.logger.warn(`[runPrSizeCheck]: ⚠️ Could not measure PR size\n${err}`);
+        // informational — never block
+    }
+}

package/dist/scripts/pr-title-lint.js

@@ -0,0 +1,40 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runPrTitleLint = runPrTitleLint;
+const utils_1 = require("../utils");
+const node_fs_1 = __importDefault(require("node:fs"));
+const CONVENTIONAL_PREFIX = /^(feat|fix|docs|style|refactor|test|chore|perf|ci|build|revert)(\(.+\))?!?: .+/;
+async function runPrTitleLint() {
+    utils_1.logger.info('[runPrTitleLint]: 📝 Checking PR title...');
+    const eventPath = process.env.GITHUB_EVENT_PATH;
+    if (!eventPath || !node_fs_1.default.existsSync(eventPath)) {
+        utils_1.logger.info('[runPrTitleLint]: ℹ️ Not in GitHub CI, skipping');
+        return;
+    }
+    let event;
+    try {
+        event = JSON.parse(node_fs_1.default.readFileSync(eventPath, 'utf-8'));
+    }
+    catch (err) {
+        utils_1.logger.warn(`[runPrTitleLint]: ⚠️ Could not read GitHub event\n${err}`);
+        return;
+    }
+    const pr = event.pull_request;
+    if (!pr?.title) {
+        utils_1.logger.info('[runPrTitleLint]: ℹ️ No PR title found, skipping');
+        return;
+    }
+    const title = pr.title;
+    if (!CONVENTIONAL_PREFIX.test(title)) {
+        utils_1.logger.warn(`[runPrTitleLint]: ⚠️ PR title doesn't follow Conventional Commits`);
+        utils_1.logger.warn(`  Got:      "${title}"`);
+        utils_1.logger.warn(`  Expected: type(scope): description`);
+        utils_1.logger.warn(`  Types:    feat|fix|docs|style|refactor|test|chore|perf|ci|build|revert`);
+        // warning only — teams may not use Conventional Commits
+        return;
+    }
+    utils_1.logger.info(`[runPrTitleLint]: ✅ PR title is valid: "${title}"`);
+}

package/dist/scripts/prettier-autoformat.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.runPrettier = runPrettier;
 const config_1 = require("../config");
 const utils_1 = require("../utils");
+const delta_1 = require("../utils/delta");
 const execa_1 = require("execa");
 const node_path_1 = __importDefault(require("node:path"));
 const node_fs_1 = __importDefault(require("node:fs"));
@@ -58,24 +59,12 @@ function createTempIgnoreFile() {
     node_fs_1.default.writeFileSync(file, config_1.IGNORE_PATTERNS.join('\n'), 'utf-8');
     return file;
 }
-/**
- * Remove temporary file
- */
-function cleanupTempFile(filePath) {
-    try {
-        if (node_fs_1.default.existsSync(filePath)) {
-            node_fs_1.default.unlinkSync(filePath);
-        }
-    }
-    catch (err) {
-        utils_1.logger.warn(`[cleanupTempFile]: ⚠️ Failed cleanup: ${filePath}\n${err}`);
-    }
-}
 async function runPrettier() {
     utils_1.logger.info('[runPrettier]: 🎨 Running Prettier...');
     const root = process.cwd();
     const sourcePath = (0, config_1.getSourcePath)();
-    const targetGlob = `${node_path_1.default.join(root, sourcePath)}/**/*.{ts,tsx,js,jsx,json,md}`;
+    const changedFiles = await (0, delta_1.getChangedFiles)(['.ts', '.tsx', '.js', '.jsx', '.json', '.md']);
+    const targets = changedFiles ?? [`${node_path_1.default.join(root, sourcePath)}/**/*.{ts,tsx,js,jsx,json,md}`];
     const projectIgnore = node_path_1.default.join(root, '.prettierignore');
     const gitignore = node_path_1.default.join(root, '.gitignore');
     let ignorePath;
@@ -100,13 +89,13 @@ async function runPrettier() {
     let tempConfig = null;
     if (hasLocal) {
         utils_1.logger.info(`[runPrettier]: 📋 Using local Prettier config (checking: ${sourcePath})`);
-        args = ['prettier', '--write', targetGlob, '--ignore-path', ignorePath];
+        args = ['prettier', '--write', ...targets, '--ignore-path', ignorePath];
     }
     else {
         utils_1.logger.info(`[runPrettier]: 📦 Using pr-checkmate Prettier config (checking: ${sourcePath})`);
         // Create temporary config with merged settings
         tempConfig = createTempPrettierConfig();
-        args = ['prettier', '--write', targetGlob, '--config', tempConfig, '--ignore-path', ignorePath];
+        args = ['prettier', '--write', ...targets, '--config', tempConfig, '--ignore-path', ignorePath];
     }
     try {
         await (0, execa_1.execa)('npx', args, { stdio: 'inherit' });
@@ -119,8 +108,8 @@ async function runPrettier() {
     finally {
         // Cleanup temporary files
         if (tempIgnore)
-            cleanupTempFile(tempIgnore);
+            (0, utils_1.cleanupTempFile)(tempIgnore);
         if (tempConfig)
-            cleanupTempFile(tempConfig);
+            (0, utils_1.cleanupTempFile)(tempConfig);
     }
 }

package/dist/scripts/security.js

@@ -6,15 +6,15 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.runSecurityScan = runSecurityScan;
 const execa_1 = require("execa");
 const utils_1 = require("../utils");
-const node_fs_1 = require("node:fs");
-const node_child_process_1 = require("node:child_process");
+const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 /**
  * Get HEAD SHA from git
  */
-function getHeadSha() {
+async function getHeadSha() {
     try {
-        return (0, node_child_process_1.execSync)('git rev-parse HEAD', { encoding: 'utf-8' }).trim();
+        const { stdout } = await (0, execa_1.execa)('git', ['rev-parse', 'HEAD']);
+        return stdout.trim();
     }
     catch (err) {
         utils_1.logger.warn(`⚠️ Could not determine HEAD SHA from git\n${err}`);
@@ -24,14 +24,12 @@ function getHeadSha() {
 /**
  * Get BASE SHA (for PR) or parent commit (for push)
  */
-function getBaseSha() {
+async function getBaseSha() {
     const eventName = process.env.GITHUB_EVENT_NAME;
     const eventPath = process.env.GITHUB_EVENT_PATH;
     try {
-        if (eventName === 'pull_request' && eventPath && (0, node_fs_1.existsSync)(eventPath)) {
-            // For PR: use pull_request.base.sha from GitHub event
-            const fs = require('node:fs');
-            const event = JSON.parse(fs.readFileSync(eventPath, 'utf-8'));
+        if (eventName === 'pull_request' && eventPath && node_fs_1.default.existsSync(eventPath)) {
+            const event = JSON.parse(node_fs_1.default.readFileSync(eventPath, 'utf-8'));
             const baseSha = event?.pull_request?.base?.sha;
             if (baseSha) {
                 utils_1.logger.info(`[getBaseSha]: ℹ️ Using PR base SHA: ${baseSha}`);
@@ -40,12 +38,11 @@ function getBaseSha() {
         }
     }
     catch (err) {
-        utils_1.logger.warn(`[getBaseSha]: ⚠️ Could not read GitHub event, trying git parent commit
-      ${err}`);
+        utils_1.logger.warn(`[getBaseSha]: ⚠️ Could not read GitHub event, trying git parent commit\n${err}`);
     }
-    // For push: use parent commit
     try {
-        return (0, node_child_process_1.execSync)('git rev-parse HEAD^', { encoding: 'utf-8' }).trim();
+        const { stdout } = await (0, execa_1.execa)('git', ['rev-parse', 'HEAD^']);
+        return stdout.trim();
     }
     catch (err) {
         utils_1.logger.warn(`⚠️ Could not determine BASE SHA (might be first commit)\n${err}`);
@@ -57,7 +54,7 @@ function getBaseSha() {
  */
 function getGitleaksCommand() {
     const localPath = node_path_1.default.join(process.cwd(), 'node_modules', '.bin', 'gitleaks-secret-scanner');
-    if ((0, node_fs_1.existsSync)(localPath)) {
+    if (node_fs_1.default.existsSync(localPath)) {
         utils_1.logger.info('[getGitleaksCommand]: 📦 Using local gitleaks-secret-scanner');
         return localPath;
     }
@@ -70,22 +67,19 @@ function getGitleaksCommand() {
 async function runSecurityScan() {
     utils_1.logger.info('🔐 Running security scan with gitleaks-secret-scanner...');
     try {
-        // Set up environment variables
-        const headSha = getHeadSha();
+        const headSha = await getHeadSha();
         if (!headSha) {
             utils_1.logger.warn('⚠️ Could not determine HEAD SHA, security scan may not work properly');
         }
-        const baseSha = getBaseSha();
+        const baseSha = await getBaseSha();
         if (!baseSha) {
             utils_1.logger.warn('⚠️ Could not determine BASE SHA, will scan all commits');
         }
-        // Prepare environment
         const env = {
             ...process.env,
             ...(headSha && { HEAD_SHA: headSha }),
             ...(baseSha && { BASE_SHA: baseSha }),
         };
-        // Get gitleaks command
         const cmd = getGitleaksCommand();
         const args = cmd === 'npx' ? ['gitleaks-secret-scanner', '--diff-mode', 'ci'] : ['--diff-mode', 'ci'];
         utils_1.logger.info(`Running: ${cmd} ${args.join(' ')}`);
@@ -97,12 +91,10 @@ async function runSecurityScan() {
         utils_1.logger.info('✅ Security scan completed successfully');
     }
     catch (err) {
-        // gitleaks returns exit code 1 if secrets are found
-        // This is expected behavior, we should inform but not necessarily crash
         if (err instanceof Error && 'exitCode' in err && err.exitCode === 1) {
             utils_1.logger.warn('⚠️ gitleaks found potential secrets - please review gitleaks-report.html');
             utils_1.logger.warn('💡 If this is a false positive, add it to .gitleaksignore');
-            throw err; // Still throw to fail the CI
+            throw err;
         }
         utils_1.logger.error('[runSecurityScan]: ❌ Security scan failed');
         throw err;

package/dist/scripts/spellcheck.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.runSpellcheck = runSpellcheck;
 const config_1 = require("../config");
 const utils_1 = require("../utils");
+const delta_1 = require("../utils/delta");
 const execa_1 = require("execa");
 const node_path_1 = __importDefault(require("node:path"));
 const node_fs_1 = __importDefault(require("node:fs"));
@@ -55,19 +56,6 @@ function createTempCspellConfig() {
     node_fs_1.default.writeFileSync(tempConfigPath, JSON.stringify(mergedConfig, null, 2));
     return tempConfigPath;
 }
-/**
- * Clean up temporary config file
- */
-function cleanupTempConfig(configPath) {
-    try {
-        if (node_fs_1.default.existsSync(configPath)) {
-            node_fs_1.default.unlinkSync(configPath);
-        }
-    }
-    catch (err) {
-        utils_1.logger.warn(`⚠️ Failed to cleanup temp config: ${err}`);
-    }
-}
 /**
  * Build cspell patterns + ignore patterns
  */
@@ -80,7 +68,16 @@ async function runSpellcheck() {
     utils_1.logger.info('[runSpellcheck]:  🔤 Running Spellcheck...');
     const projectRoot = process.cwd();
     const sourcePath = (0, config_1.getSourcePath)();
-    const patterns = buildSpellcheckPatterns(projectRoot, sourcePath);
+    const changedFiles = await (0, delta_1.getChangedFiles)([
+        '.ts',
+        '.tsx',
+        '.js',
+        '.jsx',
+        '.md',
+        '.mdx',
+        '.json',
+    ]);
+    const patterns = changedFiles ?? buildSpellcheckPatterns(projectRoot, sourcePath);
     const hasLocal = (0, config_1.hasLocalConfig)(['cspell.json', '.cspell.json', 'cspell.config.json']);
     let args;
     let tempConfigPath = null;
@@ -105,7 +102,7 @@ async function runSpellcheck() {
     finally {
         // Cleanup temporary config
         if (tempConfigPath) {
-            cleanupTempConfig(tempConfigPath);
+            (0, utils_1.cleanupTempFile)(tempConfigPath);
         }
     }
 }

package/dist/utils/delta.js

@@ -0,0 +1,53 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getChangedFiles = getChangedFiles;
+const execa_1 = require("execa");
+const logger_1 = require("./logger");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+/**
+ * Returns list of changed files in the current PR filtered by extension.
+ * Returns null when not in a GitHub PR context (falls back to full-project scan).
+ */
+async function getChangedFiles(extensions) {
+    const eventName = process.env.GITHUB_EVENT_NAME;
+    const eventPath = process.env.GITHUB_EVENT_PATH;
+    if (eventName !== 'pull_request' || !eventPath || !node_fs_1.default.existsSync(eventPath)) {
+        return null;
+    }
+    let baseSha = null;
+    try {
+        const event = JSON.parse(node_fs_1.default.readFileSync(eventPath, 'utf-8'));
+        baseSha = event?.pull_request?.base?.sha ?? null;
+    }
+    catch {
+        return null;
+    }
+    if (!baseSha)
+        return null;
+    try {
+        const { stdout } = await (0, execa_1.execa)('git', [
+            'diff',
+            '--name-only',
+            '--diff-filter=ACMR',
+            baseSha,
+            'HEAD',
+        ]);
+        const files = stdout
+            .split('\n')
+            .map(f => f.trim())
+            .filter(f => f && extensions.some(ext => f.endsWith(ext)))
+            .map(f => node_path_1.default.join(process.cwd(), f));
+        if (files.length === 0)
+            return null;
+        logger_1.logger.info(`[delta]: 📂 Delta mode: checking ${files.length} changed file(s)`);
+        return files;
+    }
+    catch (err) {
+        logger_1.logger.warn(`[delta]: ⚠️ Could not get changed files, falling back to full scan\n${err}`);
+        return null;
+    }
+}

package/dist/utils/index.js

@@ -13,5 +13,22 @@ var __createBinding = (this && this.__createBinding) || (Object.create ? (functi
 var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.cleanupTempFile = cleanupTempFile;
+const node_fs_1 = __importDefault(require("node:fs"));
+const logger_1 = require("./logger");
 __exportStar(require("./logger"), exports);
+__exportStar(require("./delta"), exports);
+function cleanupTempFile(filePath) {
+    try {
+        if (node_fs_1.default.existsSync(filePath)) {
+            node_fs_1.default.unlinkSync(filePath);
+        }
+    }
+    catch (err) {
+        logger_1.logger.warn(`[cleanupTempFile]: ⚠️ Failed cleanup: ${filePath}\n${err}`);
+    }
+}

package/dist/utils/logger.js

@@ -58,6 +58,9 @@ class Logger {
     getLogs() {
         return this.logs;
     }
+    setLevel(level) {
+        this.currentLevel = level;
+    }
     clear() {
         this.logs = [];
     }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pr-checkmate",
-    "version": "1.20.4",
+    "version": "1.20.7",
     "description": "Automated PR quality checks: linting, formatting, dependency analysis, and spellcheck",
     "keywords": [
         "github-actions",

package/src/config/.eslintrc.js

@@ -59,6 +59,14 @@ module.exports = {
     '@typescript-eslint/explicit-function-return-type': ['warn'],
     '@typescript-eslint/no-explicit-any': ['warn'],
     '@typescript-eslint/no-floating-promises': ['error'],
+    '@typescript-eslint/no-unused-expressions': [
+      'error',
+      {
+        allowShortCircuit: false,
+        allowTernary: false,
+        allowTaggedTemplates: false,
+      },
+    ],
     'space-before-function-paren': 'off',
     'operator-linebreak': 'off',
     'max-len': ['warn', { code: 100 }],

package/src/config/pr-checkmate-workflow.yml

@@ -145,3 +145,100 @@ jobs:
       - name: Run Dependency Check
         run: npx pr-checkmate dependencies
         continue-on-error: true
+
+  circular-deps:
+    name: Circular Dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run Circular Dependency Check
+        run: npx pr-checkmate circular
+        continue-on-error: true
+
+  license-check:
+    name: License Check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run License Check
+        run: npx pr-checkmate license
+        continue-on-error: true
+
+  pr-size:
+    name: PR Size
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Check PR Size
+        run: npx pr-checkmate pr-size
+        continue-on-error: true
+
+  pr-title:
+    name: PR Title
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Check PR Title
+        run: npx pr-checkmate pr-title
+        continue-on-error: true
+
+  outdated-deps:
+    name: Outdated Dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Check Outdated Dependencies
+        run: npx pr-checkmate outdated
+        continue-on-error: true