pr-checkmate 1.21.16 → 1.22.0

package/.eslintrc.js

@@ -41,7 +41,7 @@ module.exports = {
     sourceType: 'module',
     project: './tsconfig.json',
   },
-  plugins: ['@typescript-eslint', 'prettier', 'import', 'jsdoc'],
+  plugins: ['@typescript-eslint', 'prettier', 'import-x', 'jsdoc'],
   extends: [
     'eslint:recommended',
     'plugin:@typescript-eslint/recommended',
@@ -83,14 +83,14 @@ module.exports = {
     // Complexity analysis (#61)
     complexity: ['warn', 15],
     // Import ordering (#65)
-    'import/order': [
+    'import-x/order': [
       'warn',
       {
         groups: ['builtin', 'external', 'internal', 'parent', 'sibling', 'index'],
         alphabetize: { order: 'asc', caseInsensitive: true },
       },
     ],
-    'import/no-duplicates': 'error',
+    'import-x/no-duplicates': 'error',
     // Documentation (#62)
     'jsdoc/require-jsdoc': [
       'warn',

package/README.md

@@ -4,12 +4,11 @@
 ![npm](https://img.shields.io/npm/v/pr-checkmate?color=blue&label=npm)
 ![License](https://img.shields.io/badge/license-Proprietary-lightgrey)
 
-**Bundled tools:**
-![ESLint](https://img.shields.io/badge/ESLint-9-4B32C3?logo=eslint&logoColor=white)
+![ESLint](https://img.shields.io/badge/ESLint-10-4B32C3?logo=eslint&logoColor=white)
 ![Prettier](https://img.shields.io/badge/Prettier-3-F7B93E?logo=prettier&logoColor=white)
-![TypeScript](https://img.shields.io/badge/TypeScript-5.9-3178C6?logo=typescript&logoColor=white)
+![TypeScript](https://img.shields.io/badge/TypeScript-6-3178C6?logo=typescript&logoColor=white)
 ![cspell](https://img.shields.io/badge/cspell-10-4285F4)
-![jscpd](https://img.shields.io/badge/jscpd-3.5-blue)
+![jscpd](https://img.shields.io/badge/jscpd-5-blue)
 
 > **PR CheckMate** is a universal PR quality checker that runs as a single `npm install` and works across **TypeScript, JavaScript, Python, C++, Swift, and Android/Kotlin** repositories — no per-language toolchain setup required.
 

package/cspell.json

@@ -190,6 +190,8 @@
     "telaviv",
     "travis",
     "kotlin",
+    "kucherenko",
+    "opencollective",
     "Werror",
     "positiving",
     "pyflakes",

package/dist/core/checks/diff-security.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.diffSecurityCheck = void 0;
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
 const types_1 = require("../types");
+const findings_1 = require("./findings");
 const SECURITY_PATTERNS = [
     {
         pattern: /^\+(?!\+).*dangerouslySetInnerHTML\s*=/,
@@ -113,32 +113,6 @@ function scanDiff(stdout) {
     }
     return { errors, warnings };
 }
-/** Log up to 3 sample lines per label at the given severity. */
-function logFindings(bucket, isError) {
-    const emit = isError ? utils_1.logger.error.bind(utils_1.logger) : utils_1.logger.warn.bind(utils_1.logger);
-    const icon = isError ? '❌' : '⚠️';
-    for (const [label, occurrences] of Object.entries(bucket)) {
-        emit(`[Diff Security]: ${icon} ${label}: ${occurrences.length} occurrence(s)`);
-        occurrences.slice(0, 3).forEach(l => emit(`    ${l}`));
-        if (occurrences.length > 3)
-            emit(`    ... and ${occurrences.length - 3} more`);
-    }
-}
-/** Report findings and produce the check outcome. */
-function reportFindings(errors, warnings) {
-    const totalErrors = Object.values(errors).reduce((s, a) => s + a.length, 0);
-    const totalWarnings = Object.values(warnings).reduce((s, a) => s + a.length, 0);
-    if (totalErrors === 0 && totalWarnings === 0)
-        return (0, types_1.pass)();
-    logFindings(errors, true);
-    logFindings(warnings, false);
-    const parts = [];
-    if (totalErrors > 0)
-        parts.push(`${totalErrors} issue(s)`);
-    if (totalWarnings > 0)
-        parts.push(`${totalWarnings} warning(s)`);
-    return (0, types_1.warn)(parts.join(', '));
-}
 exports.diffSecurityCheck = {
     name: 'Diff Security',
     phase: 'informational',
@@ -147,22 +121,21 @@ exports.diffSecurityCheck = {
     },
     async run(ctx) {
         try {
-            const { stdout } = await (0, execa_1.execa)('git', [
-                'diff',
-                '--unified=0',
-                '--diff-filter=ACMR',
-                ctx.baseSha,
-                'HEAD',
-                '--',
+            const stdout = await (0, findings_1.diffAddedLines)(ctx, [
                 '*.ts',
                 '*.tsx',
                 '*.js',
                 '*.jsx',
                 '*.mjs',
                 '*.cjs',
-            ], { cwd: ctx.cwd });
+            ]);
             const { errors, warnings } = scanDiff(stdout);
-            return reportFindings(errors, warnings);
+            return (0, findings_1.reportSeverityBuckets)(errors, warnings, {
+                prefix: 'Diff Security',
+                errorSummary: n => `${n} issue(s)`,
+                warningSummary: n => `${n} warning(s)`,
+                sampleLimit: 3,
+            });
         }
         catch (err) {
             utils_1.logger.warn(`[Diff Security]: ⚠️ Could not analyze diff\n${err}`);

package/dist/core/checks/diff-smell.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.diffSmellCheck = void 0;
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
 const types_1 = require("../types");
+const findings_1 = require("./findings");
 const SMELL_PATTERNS = [
     {
         pattern: /^\+(?!\+)(?:[^/]|\/[^/]).*\bconsole\.(log|error|warn|debug|info)\s*\(/,
@@ -23,18 +23,7 @@ exports.diffSmellCheck = {
     },
     async run(ctx) {
         try {
-            const { stdout } = await (0, execa_1.execa)('git', [
-                'diff',
-                '--unified=0',
-                '--diff-filter=ACMR',
-                ctx.baseSha,
-                'HEAD',
-                '--',
-                '*.ts',
-                '*.tsx',
-                '*.js',
-                '*.jsx',
-            ], { cwd: ctx.cwd });
+            const stdout = await (0, findings_1.diffAddedLines)(ctx, ['*.ts', '*.tsx', '*.js', '*.jsx']);
             const findings = {};
             for (const line of stdout.split('\n')) {
                 for (const { pattern, label } of SMELL_PATTERNS) {
@@ -43,15 +32,9 @@ exports.diffSmellCheck = {
                     }
                 }
             }
-            const total = Object.values(findings).reduce((sum, arr) => sum + arr.length, 0);
-            if (total === 0)
+            if ((0, findings_1.bucketTotal)(findings) === 0)
                 return (0, types_1.pass)();
-            for (const [label, occurrences] of Object.entries(findings)) {
-                utils_1.logger.warn(`[Diff Smells]: ⚠️ ${label}: ${occurrences.length} occurrence(s)`);
-                occurrences.slice(0, 3).forEach(l => utils_1.logger.warn(`    ${l}`));
-                if (occurrences.length > 3)
-                    utils_1.logger.warn(`    ... and ${occurrences.length - 3} more`);
-            }
+            (0, findings_1.logFindings)(findings, { prefix: 'Diff Smells', sampleLimit: 3 });
             const summary = Object.entries(findings)
                 .map(([label, arr]) => `${arr.length}× ${label}`)
                 .join(', ');

package/dist/core/checks/duplicate-check.js

@@ -10,6 +10,23 @@ const execa_1 = require("execa");
 const utils_1 = require("../../utils");
 const delta_1 = require("../../utils/delta");
 const types_1 = require("../types");
+// jscpd v5 appends promotional/funding lines after its report. Strip them so
+// they never reach the client's terminal when running our package.
+const JSCPD_PROMO_MARKERS = [
+    'Auto-refactor with AI',
+    'github.com/kucherenko/jscpd',
+    'Gangsta Agents',
+    'gangsta.page',
+    'Support jscpd project',
+    'opencollective.com/jscpd',
+];
+function stripJscpdPromo(text) {
+    return text
+        .split('\n')
+        .filter(line => !JSCPD_PROMO_MARKERS.some(marker => line.includes(marker)))
+        .join('\n')
+        .trimEnd();
+}
 exports.duplicateCheck = {
     name: 'Duplicate Code',
     phase: 'informational',
@@ -40,7 +57,7 @@ exports.duplicateCheck = {
                 'node_modules/**,dist/**,.git/**',
                 ...targetPaths,
             ], { cwd: ctx.cwd, reject: false });
-            const output = [result.stdout, result.stderr].filter(Boolean).join('\n');
+            const output = stripJscpdPromo([result.stdout, result.stderr].filter(Boolean).join('\n'));
             const clonesMatch = output.match(/(\d+)\s+clone/i);
             const cloneCount = clonesMatch ? parseInt(clonesMatch[1], 10) : 0;
             if (cloneCount > 0) {

package/dist/core/checks/findings.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.diffAddedLines = diffAddedLines;
+exports.bucketTotal = bucketTotal;
+exports.logFindings = logFindings;
+exports.reportSeverityBuckets = reportSeverityBuckets;
+const execa_1 = require("execa");
+const utils_1 = require("../../utils");
+const types_1 = require("../types");
+/**
+ * Run `git diff` over the given file globs, returning the raw unified diff
+ * (zero context, added/copied/modified/renamed files) for added-line scanning.
+ */
+async function diffAddedLines(ctx, globs) {
+    const { stdout } = await (0, execa_1.execa)('git', ['diff', '--unified=0', '--diff-filter=ACMR', ctx.baseSha, 'HEAD', '--', ...globs], { cwd: ctx.cwd });
+    return stdout;
+}
+/** Total number of findings across all labels in a bucket. */
+function bucketTotal(bucket) {
+    return Object.values(bucket).reduce((sum, arr) => sum + arr.length, 0);
+}
+/** Log one bucket of findings using the shared check format. */
+function logFindings(bucket, opts) {
+    const emit = opts.isError ? utils_1.logger.error.bind(utils_1.logger) : utils_1.logger.warn.bind(utils_1.logger);
+    const icon = opts.isError ? '❌' : '⚠️';
+    const showCount = opts.showCount ?? true;
+    const { sampleLimit } = opts;
+    for (const [label, items] of Object.entries(bucket)) {
+        emit(`[${opts.prefix}]: ${icon} ${label}${showCount ? `: ${items.length} occurrence(s)` : ':'}`);
+        const shown = sampleLimit === undefined ? items : items.slice(0, sampleLimit);
+        shown.forEach(item => emit(`    ${item}`));
+        if (sampleLimit !== undefined && items.length > sampleLimit) {
+            emit(`    ... and ${items.length - sampleLimit} more`);
+        }
+    }
+}
+/**
+ * Report error/warning finding buckets: log both, then produce the outcome.
+ * Returns pass() when both buckets are empty, otherwise warn() with a summary.
+ */
+function reportSeverityBuckets(errors, warnings, opts) {
+    const totalErrors = bucketTotal(errors);
+    const totalWarnings = bucketTotal(warnings);
+    if (totalErrors === 0 && totalWarnings === 0)
+        return (0, types_1.pass)();
+    const logOpts = { prefix: opts.prefix, showCount: opts.showCount, sampleLimit: opts.sampleLimit };
+    logFindings(errors, { ...logOpts, isError: true });
+    logFindings(warnings, { ...logOpts, isError: false });
+    const parts = [];
+    if (totalErrors > 0)
+        parts.push(opts.errorSummary(totalErrors));
+    if (totalWarnings > 0)
+        parts.push(opts.warningSummary(totalWarnings));
+    return (0, types_1.warn)(parts.join(', '));
+}

package/dist/core/checks/lint.js

@@ -38,7 +38,14 @@ exports.lintCheck = {
             '.eslintrc.json',
             '.eslintrc',
         ]);
-        const args = [...targets, '--ext', '.ts,.tsx,.js,.jsx'];
+        const version = await getESLintMajorVersion(eslintBin);
+        const args = [...targets];
+        // `--ext` is an eslintrc-only flag. Under flat config (ESLint 9+) it is
+        // obsolete — extensions come from the config's `files` glob — and in
+        // ESLint 10 passing it makes explicit files fall back to the default JS
+        // parser, breaking TypeScript linting. Only pass it on the legacy path.
+        if (version < 9)
+            args.push('--ext', '.ts,.tsx,.js,.jsx');
         // Only auto-fix when the caller allows file mutations.
         if (ctx.write)
             args.push('--fix');
@@ -46,7 +53,6 @@ exports.lintCheck = {
             utils_1.logger.info(`[ESLint]: Using local config (checking: ${sourcePath})`);
         }
         else {
-            const version = await getESLintMajorVersion(eslintBin);
             const configFile = version >= 9 ? 'eslint.config.mjs' : '.eslintrc.js';
             args.push('--config', (0, config_1.getPackageConfigPath)(configFile));
             utils_1.logger.info(`[ESLint]: Using pr-checkmate config (ESLint v${version}, ${configFile})`);

package/dist/core/checks/sensitive-file-guard.js

@@ -4,6 +4,7 @@ exports.sensitiveFileGuardCheck = void 0;
 const execa_1 = require("execa");
 const utils_1 = require("../../utils");
 const types_1 = require("../types");
+const findings_1 = require("./findings");
 const SENSITIVE_CATEGORIES = [
     {
         label: 'Environment files (.env)',
@@ -68,30 +69,6 @@ function categorizeFiles(changedFiles) {
     }
     return { errors, warnings };
 }
-/** Log every file per label at the given severity. */
-function logFiles(bucket, isError) {
-    const emit = isError ? utils_1.logger.error.bind(utils_1.logger) : utils_1.logger.warn.bind(utils_1.logger);
-    const icon = isError ? '❌' : '⚠️';
-    for (const [label, files] of Object.entries(bucket)) {
-        emit(`[Sensitive Files]: ${icon} ${label}:`);
-        files.forEach(f => emit(`    ${f}`));
-    }
-}
-/** Report categorized files and produce the check outcome. */
-function reportFiles(errors, warnings) {
-    const totalErrors = Object.values(errors).reduce((s, a) => s + a.length, 0);
-    const totalWarnings = Object.values(warnings).reduce((s, a) => s + a.length, 0);
-    if (totalErrors === 0 && totalWarnings === 0)
-        return (0, types_1.pass)();
-    logFiles(errors, true);
-    logFiles(warnings, false);
-    const parts = [];
-    if (totalErrors > 0)
-        parts.push(`${totalErrors} sensitive file(s) changed`);
-    if (totalWarnings > 0)
-        parts.push(`${totalWarnings} notable file(s) changed`);
-    return (0, types_1.warn)(parts.join(', '));
-}
 exports.sensitiveFileGuardCheck = {
     name: 'Sensitive Files',
     phase: 'informational',
@@ -105,7 +82,12 @@ exports.sensitiveFileGuardCheck = {
             if (changedFiles.length === 0)
                 return (0, types_1.pass)();
             const { errors, warnings } = categorizeFiles(changedFiles);
-            return reportFiles(errors, warnings);
+            return (0, findings_1.reportSeverityBuckets)(errors, warnings, {
+                prefix: 'Sensitive Files',
+                errorSummary: n => `${n} sensitive file(s) changed`,
+                warningSummary: n => `${n} notable file(s) changed`,
+                showCount: false,
+            });
         }
         catch (err) {
             utils_1.logger.warn(`[Sensitive Files]: ⚠️ Could not check file changes\n${err}`);

package/eslint.config.mjs

@@ -4,7 +4,7 @@ import tsPlugin from '@typescript-eslint/eslint-plugin';
 import tsParser from '@typescript-eslint/parser';
 import prettierPlugin from 'eslint-plugin-prettier';
 import sonarjsPlugin from 'eslint-plugin-sonarjs';
-import importPlugin from 'eslint-plugin-import';
+import importPlugin from 'eslint-plugin-import-x';
 import jsdocPlugin from 'eslint-plugin-jsdoc';
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pr-checkmate",
-    "version": "1.21.16",
+    "version": "1.22.0",
     "description": "Automated PR quality checks: linting, formatting, dependency analysis, and spellcheck",
     "keywords": [
         "github-actions",
@@ -68,14 +68,14 @@
         "@cspell/dict-ru_ru": "^2.2.1",
         "@cspell/dict-uk-ua": "^4.0.0",
         "@types/node": "^26.1.0",
-        "@typescript-eslint/eslint-plugin": "^8.47.0",
-        "@typescript-eslint/parser": "^8.47.0",
+        "@typescript-eslint/eslint-plugin": "^8.62.1",
+        "@typescript-eslint/parser": "^8.62.1",
         "@wasm-fmt/clang-format": "^22.1.8",
         "cspell": "^10.0.1",
         "depcheck": "^1.4.7",
-        "eslint": "^9.26.0",
+        "eslint": "^10.6.0",
         "eslint-config-prettier": "^10.1.8",
-        "eslint-plugin-import": "^2.29.0",
+        "eslint-plugin-import-x": "^4.17.1",
         "eslint-plugin-jsdoc": "^63.0.12",
         "eslint-plugin-prettier": "^5.5.4",
         "eslint-plugin-sonarjs": "^4.1.0",
@@ -88,7 +88,7 @@
         "prettier": ">=3.0.0",
         "ts-node": "^10.9.1",
         "ts-unused-exports": "^11.0.1",
-        "typescript": "^5.9.3"
+        "typescript": "^6.0.3"
     },
     "devDependencies": {
         "standard-version": "^9.5.0"

package/src/config/.eslintrc.js

@@ -41,7 +41,7 @@ module.exports = {
     sourceType: 'module',
     project: './tsconfig.json',
   },
-  plugins: ['@typescript-eslint', 'prettier', 'import', 'jsdoc'],
+  plugins: ['@typescript-eslint', 'prettier', 'import-x', 'jsdoc'],
   extends: [
     'eslint:recommended',
     'plugin:@typescript-eslint/recommended',
@@ -83,14 +83,14 @@ module.exports = {
     // Complexity analysis (#61)
     complexity: ['warn', 15],
     // Import ordering (#65)
-    'import/order': [
+    'import-x/order': [
       'warn',
       {
         groups: ['builtin', 'external', 'internal', 'parent', 'sibling', 'index'],
         alphabetize: { order: 'asc', caseInsensitive: true },
       },
     ],
-    'import/no-duplicates': 'error',
+    'import-x/no-duplicates': 'error',
     // Documentation (#62)
     'jsdoc/require-jsdoc': [
       'warn',

package/src/config/cspell.json

@@ -190,6 +190,8 @@
     "telaviv",
     "travis",
     "kotlin",
+    "kucherenko",
+    "opencollective",
     "Werror",
     "positiving",
     "pyflakes",

package/src/config/eslint.config.mjs

@@ -4,7 +4,7 @@ import tsPlugin from '@typescript-eslint/eslint-plugin';
 import tsParser from '@typescript-eslint/parser';
 import prettierPlugin from 'eslint-plugin-prettier';
 import sonarjsPlugin from 'eslint-plugin-sonarjs';
-import importPlugin from 'eslint-plugin-import';
+import importPlugin from 'eslint-plugin-import-x';
 import jsdocPlugin from 'eslint-plugin-jsdoc';
 
 /**