shadscan-vue 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.3.0](https://github.com/vinayakkulkarni/shadscan-vue/compare/v0.2.1...v0.3.0) (2026-07-26)
+
+
+### Features
+
+* **scan:** skip illustrative directories ([50fec75](https://github.com/vinayakkulkarni/shadscan-vue/commit/50fec753c75378e5dede5ce65bf69e09aed41c39))
+
+
+### Documentation
+
+* reference the action by its moving major tag ([0ee2d7d](https://github.com/vinayakkulkarni/shadscan-vue/commit/0ee2d7d0d503cb3d68312f5172a53da00bbf19c6))
+
+## [0.2.1](https://github.com/vinayakkulkarni/shadscan-vue/compare/v0.2.0...v0.2.1) (2026-07-26)
+
+
+### Bug Fixes
+
+* **rules:** treat slot-projected content as an accessible name ([4dc2cc0](https://github.com/vinayakkulkarni/shadscan-vue/commit/4dc2cc0413b28f76783c85035f4ca83b46feaa39))
+
 ## [0.2.0](https://github.com/vinayakkulkarni/shadscan-vue/compare/v0.1.2...v0.2.0) (2026-07-26)
 
 

package/README.md

@@ -88,7 +88,7 @@ There is also a composite action, which writes the score and every failing
 rule to the job summary:
 
 ```yaml
-- uses: vinayakkulkarni/shadscan-vue@v0.2.0
+- uses: vinayakkulkarni/shadscan-vue@v0
   with:
     fail-under: 70
 ```

package/dist/index.js

@@ -4,7 +4,7 @@ import path from "node:path";
 import { cac } from "cac";
 import { glob } from "tinyglobby";
 import { parse } from "@vue/compiler-sfc";
-import { NodeTypes } from "@vue/compiler-dom";
+import { ElementTypes, NodeTypes } from "@vue/compiler-dom";
 import ts from "typescript";
 import { parse as parse$1 } from "jsonc-parser";
 import pc from "picocolors";
@@ -64,6 +64,12 @@ const IGNORE_PATTERNS = [
 	"**/fixtures/**",
 	"**/__tests__/**",
 	"**/__mocks__/**",
+	"**/__registry__/**",
+	"**/demo/**",
+	"**/demos/**",
+	"**/example/**",
+	"**/examples/**",
+	"**/_*/**",
 	"**/*.spec.*",
 	"**/*.test.*",
 	"**/*.stories.*",
@@ -736,6 +742,19 @@ const collectText = (children) => {
 };
 const visibleText = (element) => collectText(element.children).trim();
 /**
+* True when the element projects caller-supplied content through a `<slot>`.
+* The name then lives at the call site, so the component itself cannot be
+* judged nameless — `<a><slot /></a>` is a wrapper, not an anonymous link.
+*/
+const projectsSlotContent = (element) => {
+	for (const child of element.children) {
+		if (child.type !== NodeTypes.ELEMENT) continue;
+		if (child.tagType === ElementTypes.SLOT) return true;
+		if (projectsSlotContent(child)) return true;
+	}
+	return false;
+};
+/**
 * True when the element carries an explicit accessible name via ARIA,
 * a title, or visually-hidden text.
 */
@@ -1234,7 +1253,7 @@ const iconButtonsHaveLabels = {
 			const children = elementChildren(element);
 			if (!(children.length > 0 && children.every((child) => isIconTag$1(child.tag)) || findAttribute(element, "size")?.static === "icon")) return;
 			if (visibleText(element).length > 0) return;
-			if (hasAriaName(element) || hasScreenReaderText(element)) return;
+			if (hasAriaName(element) || hasScreenReaderText(element) || projectsSlotContent(element)) return;
 			findings.push({
 				message: `Icon-only <${element.tag}> has no accessible name.`,
 				evidence: [{
@@ -1439,7 +1458,7 @@ const linksHaveAccessibleNames = {
 			if (!LINK_TAGS$2.has(element.tag)) return;
 			if (visibleText(element).length > 0) return;
 			if (hasAriaName(element) || hasScreenReaderText(element)) return;
-			if (hasLabelledImage(element)) return;
+			if (hasLabelledImage(element) || projectsSlotContent(element)) return;
 			findings.push({
 				message: `<${element.tag}> has no accessible name.`,
 				evidence: [{