pr-checkmate 1.23.2 → 1.23.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -4
- package/cspell.json +963 -453
- package/dist/config/constants.js +1 -0
- package/dist/config/loader.d.ts +1 -1
- package/dist/config/loader.js +7 -3
- package/dist/core/checks/dependencies/grype-scan.d.ts +17 -0
- package/dist/core/checks/dependencies/grype-scan.js +90 -0
- package/dist/core/registry.js +2 -0
- package/dist/init.js +4 -1
- package/dist/interfaces/index.d.ts +5 -0
- package/dist/utils/direct-deps.d.ts +21 -0
- package/dist/utils/direct-deps.js +225 -0
- package/dist/utils/index.d.ts +1 -0
- package/dist/utils/index.js +1 -0
- package/package.json +3 -3
- package/pr-checkmate.schema.json +11 -0
- package/src/config/cspell.json +963 -453
- package/src/config/pr-checkmate.schema.json +11 -0
package/README.md
CHANGED
|
@@ -9,7 +9,7 @@
|
|
|
9
9
|
|
|
10
10
|
[](https://pr-checkmate-docs.pages.dev)
|
|
11
11
|
|
|
12
|
-
> PR CheckMate is a universal PR quality checker: one `npm install`,
|
|
12
|
+
> PR CheckMate is a universal PR quality checker: one `npm install`, 49 checks across
|
|
13
13
|
> 11 languages, running in CI on every pull request. The bundled languages need no
|
|
14
14
|
> per-language toolchain setup.
|
|
15
15
|
|
|
@@ -108,15 +108,16 @@ skipped, not failed.
|
|
|
108
108
|
|
|
109
109
|
## Checks
|
|
110
110
|
|
|
111
|
-
|
|
111
|
+
49 checks, grouped by category and run in parallel within each phase:
|
|
112
112
|
|
|
113
113
|
- Universal git-diff (18) — language-agnostic and bundled: merge-conflict markers,
|
|
114
114
|
secret scan, diff security (JS/TS/Python/Go/Kotlin), GitHub Actions and Dockerfile
|
|
115
115
|
security, case-collision, custom rules, banned imports, license headers, leftover
|
|
116
116
|
debug lines, lockfile drift, large/binary files, TODO/FIXME, missing tests, coverage
|
|
117
117
|
presence, DB migration safety, and sensitive-file guard.
|
|
118
|
-
- Dependencies (
|
|
119
|
-
|
|
118
|
+
- Dependencies (7) — unused/missing, circular, outdated, license compliance, npm audit,
|
|
119
|
+
a cross-language vuln scan (osv-scanner, opt-in), and a direct-dependency vuln scan
|
|
120
|
+
(grype, on by default).
|
|
120
121
|
- Quality (4) — duplicate code, dead code, multi-language spellcheck, markdown lint.
|
|
121
122
|
- PR hygiene (4) — size, title, body, and commit-message convention.
|
|
122
123
|
- Per-language (16) — lint, format, and type-check for the languages listed above.
|