pr-checkmate 1.22.4 → 1.22.5

package/.eslintrc.js

@@ -81,7 +81,7 @@ module.exports = {
       { blankLine: 'always', prev: '*', next: 'return' },
     ],
     // Complexity analysis (#61)
-    complexity: ['warn', 15],
+    complexity: ['warn', 30],
     // Import ordering (#65)
     'import-x/order': [
       'warn',

package/README.md

@@ -226,7 +226,7 @@ jobs:
 | Ruff Lint | informational | Python linting via WASM |
 | SwiftLint | informational | Swift linting |
 | ktlint | informational | Kotlin linting |
-| Dead Code | informational | Unused exports (`ts-unused-exports`) |
+| Dead Code | informational | Unused exports (`ts-unused-exports`); test and mock files are excluded from the report by default — override with `deadCode.ignoreFiles` (regex) |
 | Duplicate Code | informational | `jscpd` — 5 lines / 50 tokens threshold; test files ignored by default (set `duplicate.ignore`); only source-code formats are scanned, so YAML/JSON/Markdown are skipped unless you override `duplicate.formats` |
 | Diff Smell | informational | `console.*`, `debugger`, `TODO/FIXME` in added lines |
 | Diff Security | informational | XSS, `eval`, SQLi, weak crypto in added lines |
@@ -265,7 +265,10 @@ All checks can be tuned or disabled per-repo via `pr-checkmate.json`:
     "formats": ["javascript", "typescript", "jsx", "tsx", "python", "kotlin", "swift", "c", "cpp"],
     "ignore": ["**/__tests__/**", "**/*.test.*", "**/*.spec.*", "**/test/**", "**/tests/**"]
   },
-  "deadCode": { "enabled": false },
+  "deadCode": {
+    "enabled": true,
+    "ignoreFiles": ["src/index\\.ts", "handler"]
+  },
   "dependency": {
     "enabled": true,
     "ignore": ["@types/*", "some-cli-tool"]
@@ -294,6 +297,13 @@ A note on `dependency.ignore`:
 - Use it for packages that only run as CLI binaries or are referenced from config files. depcheck sees no `import` for them and would otherwise flag them as unused.
 - When set, `dependency.ignore` takes precedence over any `.depcheckrc` file. Leave it empty or unset and your existing `.depcheckrc` still applies.
 
+A note on `deadCode.ignoreFiles`:
+
+- The values are regex sources, not globs, and each one is matched against the file path. So `\.test\.` matches any file with `.test.` in its name.
+- It defaults to test and mock files: `/__tests__/`, `/__mocks__/`, `/__mock__/`, `/tests?/`, `\.test\.`, `\.spec\.`. Their exports are consumed only by the test runner, so they showed up as false-positive "unused" before.
+- Setting it replaces the default list rather than merging with it. Reach for it to exempt entry points or barrels like `src/index.ts` or a lambda `handler` whose exports are the public surface.
+- It applies to the report only and never drops files from analysis, so a match here cannot cascade into missed dead code elsewhere.
+
 ---
 
 ## Delta Mode

package/dist/config/constants.d.ts

@@ -9,6 +9,16 @@ export declare const IGNORE_PATTERNS: string[];
  * override this list via `duplicate.ignore` in pr-checkmate.json.
  */
 export declare const DUPLICATE_IGNORE_DEFAULTS: string[];
+/**
+ * Files excluded from the dead-code (unused-exports) report by default. These are
+ * REGEX sources (matched against each reported file path), not globs — dead-code's
+ * `ignoreFiles` is regex-based. Test and mock files legitimately export helpers and
+ * mocks consumed only by the test runner (jest.mock, dynamic imports), which
+ * ts-unused-exports cannot see as usage, so flagging them is noise. Clients can
+ * override via `deadCode.ignoreFiles` in pr-checkmate.json (setting it replaces
+ * this list).
+ */
+export declare const DEAD_CODE_IGNORE_DEFAULTS: string[];
 export declare const CONFIG_FILE_PATTERNS: string[];
 /**
  * jscpd formats the duplicate-CODE check scans. Restricting to code formats keeps

package/dist/config/constants.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CONFIG_FILE = exports.documentation = exports.DEFAULT_ALLOW_PACKAGES = exports.DEFAULT_COMMANDS = exports.SOURCE_EXTENSIONS = exports.DUPLICATE_CODE_FORMATS = exports.CONFIG_FILE_PATTERNS = exports.DUPLICATE_IGNORE_DEFAULTS = exports.IGNORE_PATTERNS = void 0;
+exports.CONFIG_FILE = exports.documentation = exports.DEFAULT_ALLOW_PACKAGES = exports.DEFAULT_COMMANDS = exports.SOURCE_EXTENSIONS = exports.DUPLICATE_CODE_FORMATS = exports.CONFIG_FILE_PATTERNS = exports.DEAD_CODE_IGNORE_DEFAULTS = exports.DUPLICATE_IGNORE_DEFAULTS = exports.IGNORE_PATTERNS = void 0;
 const node_path_1 = __importDefault(require("node:path"));
 /**
  * Common patterns to ignore in all checks
@@ -71,6 +71,23 @@ exports.DUPLICATE_IGNORE_DEFAULTS = [
     '**/test/**',
     '**/tests/**',
 ];
+/**
+ * Files excluded from the dead-code (unused-exports) report by default. These are
+ * REGEX sources (matched against each reported file path), not globs — dead-code's
+ * `ignoreFiles` is regex-based. Test and mock files legitimately export helpers and
+ * mocks consumed only by the test runner (jest.mock, dynamic imports), which
+ * ts-unused-exports cannot see as usage, so flagging them is noise. Clients can
+ * override via `deadCode.ignoreFiles` in pr-checkmate.json (setting it replaces
+ * this list).
+ */
+exports.DEAD_CODE_IGNORE_DEFAULTS = [
+    '/__tests__/',
+    '/__mocks__/',
+    '/__mock__/',
+    '/tests?/',
+    '\\.test\\.',
+    '\\.spec\\.',
+];
 exports.CONFIG_FILE_PATTERNS = [
     '**/*.config.js',
     '**/*.config.cjs',

package/dist/config/loader.js

@@ -70,6 +70,7 @@ function mergeWithDefaults(userConfig) {
         prBody: { ...defaults.prBody, ...userConfig.prBody },
         duplicate: { ...defaults.duplicate, ...userConfig.duplicate },
         dependency: { ...defaults.dependency, ...userConfig.dependency },
+        outdatedDeps: { ...defaults.outdatedDeps, ...userConfig.outdatedDeps },
         commitlint: { ...defaults.commitlint, ...userConfig.commitlint },
         deadCode: { ...defaults.deadCode, ...userConfig.deadCode },
         licenseCheck: {
@@ -153,7 +154,8 @@ function getDefaultConfig() {
             formats: constants_1.DUPLICATE_CODE_FORMATS,
         },
         dependency: { enabled: true, ignore: [] },
-        deadCode: { enabled: true, ignoreFiles: [] },
+        outdatedDeps: { enabled: true, ignore: [] },
+        deadCode: { enabled: true, ignoreFiles: constants_1.DEAD_CODE_IGNORE_DEFAULTS },
         commitlint: {
             enabled: true,
             types: [

package/dist/core/checks/circular-deps.js

@@ -5,9 +5,9 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.circularDepsCheck = void 0;
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const config_1 = require("../../config");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 exports.circularDepsCheck = {
     name: 'Circular Deps',

package/dist/core/checks/commitlint.js

@@ -7,9 +7,9 @@ exports.commitlintCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_os_1 = __importDefault(require("node:os"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const config_1 = require("../../config");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 const LOCAL_CONFIG_FILES = [
     'commitlint.config.cjs',

package/dist/core/checks/cpp-format.js

@@ -6,8 +6,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.cppFormatCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 /**
  * C/C++ source & header extensions clang-format understands. `.h` is intentionally

package/dist/core/checks/dead-code.js

@@ -6,8 +6,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.deadCodeCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
+const constants_1 = require("../../config/constants");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 exports.deadCodeCheck = {
     name: 'Dead Code',
@@ -39,7 +40,7 @@ exports.deadCodeCheck = {
                 utils_1.logger.info('[Dead Code]: ✅ No unused exports found');
                 return (0, types_1.pass)();
             }
-            const ignore = compileIgnorePatterns(ctx.config.deadCode?.ignoreFiles);
+            const ignore = compileIgnorePatterns(ctx.config.deadCode?.ignoreFiles ?? constants_1.DEAD_CODE_IGNORE_DEFAULTS);
             // ts-unused-exports prints one `path: sym1, sym2` line per file, preceded
             // by a `N modules with unused exports` summary line we skip.
             const entries = output

package/dist/core/checks/dependency-check.js

@@ -6,8 +6,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.dependencyCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 exports.dependencyCheck = {
     name: 'Dependencies',

package/dist/core/checks/duplicate-check.js

@@ -6,10 +6,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.duplicateCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const constants_1 = require("../../config/constants");
 const utils_1 = require("../../utils");
 const delta_1 = require("../../utils/delta");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 // Always excluded regardless of client config — scanning these never yields
 // meaningful production duplication. Config files (eslint/*.config.*) are data,

package/dist/core/checks/findings.js

@@ -4,8 +4,8 @@ exports.diffAddedLines = diffAddedLines;
 exports.bucketTotal = bucketTotal;
 exports.logFindings = logFindings;
 exports.reportSeverityBuckets = reportSeverityBuckets;
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 /**
  * Run `git diff` over the given file globs, returning the raw unified diff

package/dist/core/checks/kotlin-lint.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.kotlinLintCheck = void 0;
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const targets_1 = require("../targets");
 const types_1 = require("../types");
 const KOTLIN_GLOBS = ['*.kt', '*.kts'];

package/dist/core/checks/license-check.js

@@ -6,8 +6,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.licenseCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 const FORBIDDEN_LICENSES = ['GPL-2.0', 'GPL-3.0', 'AGPL-3.0', 'LGPL-2.0', 'LGPL-2.1', 'LGPL-3.0'];
 /** Strip the trailing "@version" to get the bare package name (scoped-safe). */

package/dist/core/checks/lint.js

@@ -5,10 +5,10 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.lintCheck = void 0;
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const config_1 = require("../../config");
 const utils_1 = require("../../utils");
 const delta_1 = require("../../utils/delta");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 async function getESLintMajorVersion(eslintBin) {
     try {

package/dist/core/checks/markdown-lint.js

@@ -7,10 +7,10 @@ exports.markdownLintCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_os_1 = __importDefault(require("node:os"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const config_1 = require("../../config");
 const utils_1 = require("../../utils");
 const delta_1 = require("../../utils/delta");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 function loadUserMarkdownConfig(cwd) {
     const configPath = node_path_1.default.join(cwd, 'pr-checkmate.json');

package/dist/core/checks/npm-audit.js

@@ -6,8 +6,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.npmAuditCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 const SEVERITY_ORDER = ['info', 'low', 'moderate', 'high', 'critical'];
 function isSeverityAtLeast(severity, level) {

package/dist/core/checks/outdated-deps.js

@@ -6,13 +6,15 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.outdatedDepsCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 exports.outdatedDepsCheck = {
     name: 'Outdated Deps',
     phase: 'informational',
     applies(ctx) {
+        if (ctx.config.outdatedDeps?.enabled === false)
+            return false;
         return node_fs_1.default.existsSync(node_path_1.default.join(ctx.cwd, 'package.json'));
     },
     async run(ctx) {
@@ -27,7 +29,10 @@ exports.outdatedDepsCheck = {
         catch {
             return (0, types_1.pass)();
         }
-        const entries = Object.entries(outdated);
+        // Packages deliberately pinned behind their latest major (see outdatedDeps.ignore
+        // in pr-checkmate.json) are dropped before counting, so they never warn.
+        const ignore = new Set(ctx.config.outdatedDeps?.ignore ?? []);
+        const entries = Object.entries(outdated).filter(([pkg]) => !ignore.has(pkg));
         if (entries.length === 0)
             return (0, types_1.pass)();
         const majorBehind = entries.filter(([, info]) => {

package/dist/core/checks/pr-size-check.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.prSizeCheck = void 0;
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 const WARN_FILES = 50;
 const WARN_LINES = 1000;

package/dist/core/checks/prettier.js

@@ -6,10 +6,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.prettierCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const config_1 = require("../../config");
 const utils_1 = require("../../utils");
 const delta_1 = require("../../utils/delta");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 function loadUserPrettierConfig(cwd) {
     const configPath = node_path_1.default.join(cwd, 'pr-checkmate.json');

package/dist/core/checks/security.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.securityCheck = void 0;
-const execa_1 = require("execa");
 const config_1 = require("../../config");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 /**
  * Secret scanning via the bundled gitleaks package. Language-agnostic — runs on

package/dist/core/checks/sensitive-file-guard.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.sensitiveFileGuardCheck = void 0;
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 const findings_1 = require("./findings");
 const SENSITIVE_CATEGORIES = [

package/dist/core/checks/spellcheck.js

@@ -6,10 +6,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.spellcheckCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const config_1 = require("../../config");
 const utils_1 = require("../../utils");
 const delta_1 = require("../../utils/delta");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 function loadUserCspellConfig(cwd) {
     const configPath = node_path_1.default.join(cwd, 'pr-checkmate.json');

package/dist/core/checks/swift-lint.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.swiftLintCheck = void 0;
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const targets_1 = require("../targets");
 const types_1 = require("../types");
 const SWIFT_GLOBS = ['*.swift'];

package/dist/core/checks/typecheck.js

@@ -6,8 +6,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.typecheckCheck = void 0;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
 const utils_1 = require("../../utils");
+const execa_1 = require("../../utils/execa");
 const types_1 = require("../types");
 /**
  * Prefer the consumer project's own TypeScript so its tsconfig is compiled by the

package/dist/core/context.js

@@ -1,10 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildContext = buildContext;
-const execa_1 = require("execa");
 const loader_1 = require("../config/loader");
 const utils_1 = require("../utils");
 const detect_language_1 = require("../utils/detect-language");
+const execa_1 = require("../utils/execa");
 /**
  * Resolve the diff range for delta-aware checks.
  * Prefers explicit opts, then GitHub PR event, then Bitbucket PR env, then git HEAD^.

package/dist/core/targets.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveTargetFiles = resolveTargetFiles;
-const execa_1 = require("execa");
 const utils_1 = require("../utils");
+const execa_1 = require("../utils/execa");
 /**
  * Lists the files a language check should operate on, matched by pathspec `globs`
  * (e.g. `['*.py']`). Uses the PR diff range when available (delta mode), else

package/dist/init.js

@@ -72,6 +72,14 @@ const DEFAULT_CONFIG = {
         // which depcheck can't see as imports and would report as unused).
         ignore: [],
     },
+    // Unused-exports check (ts-unused-exports)
+    deadCode: {
+        enabled: true,
+        // Regex sources matched against file paths; matching files are dropped from
+        // the report. Defaults to test/mock files, whose exports are used only by the
+        // test runner. Add barrels/entry points here to exempt intentional exports.
+        ignoreFiles: config_1.DEAD_CODE_IGNORE_DEFAULTS,
+    },
     documentation: config_1.documentation,
 };
 const MANUAL_ENTRY = 'Enter manually';

package/dist/interfaces/index.d.ts

@@ -98,6 +98,17 @@ export interface PRCheckMateConfig {
          */
         ignore?: string[];
     };
+    outdatedDeps?: {
+        enabled?: boolean;
+        /**
+         * Exact package names to exclude from the outdated-deps warning, e.g.
+         * "commander". Use for dependencies deliberately pinned behind their latest
+         * major (a breaking upgrade you have chosen not to take, or one held back by
+         * an `overrides` entry) so `npm outdated` no longer flags them as major-behind.
+         * Matched by exact name — no globs or version ranges.
+         */
+        ignore?: string[];
+    };
     commitlint?: {
         enabled?: boolean;
         types?: string[];
@@ -129,6 +140,9 @@ export interface PRCheckMateConfig {
          * whose exports are consumed by external installers, not within the repo.
          * Applied to the report (not ts-unused-exports' own `--ignoreFiles`), so it
          * never removes a file from analysis and cannot cascade onto other files.
+         * Defaults to test/mock files (see DEAD_CODE_IGNORE_DEFAULTS), whose exports
+         * are consumed only by the test runner and would otherwise show as unused.
+         * Setting this replaces the default list.
          */
         ignoreFiles?: string[];
     };

package/dist/utils/delta.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getChangedFiles = getChangedFiles;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
+const execa_1 = require("./execa");
 const logger_1 = require("./logger");
 /**
  * Returns list of changed files in the current PR filtered by extension.

package/dist/utils/detect-language.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.detectLanguages = detectLanguages;
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
-const execa_1 = require("execa");
+const execa_1 = require("./execa");
 const logger_1 = require("./logger");
 /**
  * Marker files that unambiguously indicate a language's presence, independent of

package/dist/utils/execa.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Lazy loader for {@link https://github.com/sindresorhus/execa | execa}.
+ *
+ * execa v9 is ESM-only. Because this package compiles to CommonJS, importing
+ * execa at module scope forces every consumer to resolve execa's full
+ * dependency graph the moment they import pr-checkmate — even consumers that
+ * only need the types or a config helper and never run a check. That graph
+ * pulls in transitive packages (e.g. `unicorn-magic`) whose `exports` maps some
+ * loaders such as `tsx` fail to resolve, which crashes the import for those
+ * consumers before any check runs.
+ *
+ * Loading execa on first use keeps the library entry point cheap and avoids
+ * dragging the subprocess toolchain into consumers that never spawn a process.
+ */
+import type { Options, Result } from 'execa';
+/**
+ * Run a command via execa, loading the module lazily on first call.
+ *
+ * Drop-in replacement for `execa(file, args, options)` at every call site in
+ * this package — all of which await the result and read it synchronously.
+ */
+export declare function execa<OptionsType extends Options = {}>(file: string, args?: readonly string[], options?: OptionsType): Promise<Result<OptionsType>>;

package/dist/utils/execa.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.execa = execa;
+/**
+ * Run a command via execa, loading the module lazily on first call.
+ *
+ * Drop-in replacement for `execa(file, args, options)` at every call site in
+ * this package — all of which await the result and read it synchronously.
+ */
+async function execa(file, args, options) {
+    const { execa: run } = await import('execa');
+    return (await run(file, args, options));
+}

package/eslint.config.mjs

@@ -36,7 +36,7 @@ export const defaultRules = {
     { blankLine: 'always', prev: '*', next: 'return' },
   ],
   // Complexity analysis (#61)
-  'sonarjs/cognitive-complexity': ['warn', 15],
+  'sonarjs/cognitive-complexity': ['warn', 30],
   'sonarjs/no-duplicate-string': ['warn', { threshold: 3 }],
   'sonarjs/no-identical-functions': 'warn',
   // Import ordering (#65)

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pr-checkmate",
-    "version": "1.22.4",
+    "version": "1.22.5",
     "description": "Automated PR quality checks: linting, formatting, dependency analysis, and spellcheck",
     "keywords": [
         "github-actions",

package/src/config/.eslintrc.js

@@ -81,7 +81,7 @@ module.exports = {
       { blankLine: 'always', prev: '*', next: 'return' },
     ],
     // Complexity analysis (#61)
-    complexity: ['warn', 15],
+    complexity: ['warn', 30],
     // Import ordering (#65)
     'import-x/order': [
       'warn',

package/src/config/eslint.config.mjs

@@ -36,7 +36,7 @@ export const defaultRules = {
     { blankLine: 'always', prev: '*', next: 'return' },
   ],
   // Complexity analysis (#61)
-  'sonarjs/cognitive-complexity': ['warn', 15],
+  'sonarjs/cognitive-complexity': ['warn', 30],
   'sonarjs/no-duplicate-string': ['warn', { threshold: 3 }],
   'sonarjs/no-identical-functions': 'warn',
   // Import ordering (#65)