slopless 0.2.14 → 0.2.15

package/README.md

@@ -2,12 +2,48 @@
 
 [![npm](https://img.shields.io/npm/v/slopless?label=npm)](https://www.npmjs.com/package/slopless)
 [![downloads](https://img.shields.io/npm/dm/slopless)](https://www.npmjs.com/package/slopless)
+[![bundle size](https://img.shields.io/bundlephobia/minzip/slopless?label=minzip)](https://bundlephobia.com/package/slopless)
+[![install size](https://packagephobia.com/badge?p=slopless)](https://packagephobia.com/result?p=slopless)
 [![license](https://img.shields.io/npm/l/slopless)](LICENSE)
-[![ci](https://img.shields.io/github/actions/workflow/status/seochecks-ai%2Fslopless/ci.yml?branch=main&label=ci)](/actions/workflows/ci.yml)
 [![node](https://img.shields.io/badge/node-22%2B-brightgreen)](package.json)
 
+[![ci](https://img.shields.io/github/actions/workflow/status/seochecks-ai%2Fslopless/ci.yml?branch=main&label=ci)](/actions/workflows/ci.yml)
+[![scorecard](https://api.scorecard.dev/projects/github.com/seochecks-ai/slopless/badge)](https://scorecard.dev/viewer/?uri=github.com/seochecks-ai/slopless)
+[![socket](https://socket.dev/api/badge/npm/package/slopless)](https://socket.dev/npm/package/slopless)
+[![snyk advisor](https://snyk.io/advisor/npm-package/slopless/badge.svg)](https://snyk.io/advisor/npm-package/slopless)
+
 Catch AI and human slop in English Markdown without calling an LLM. Slopless ships 50+ deterministic textlint rules and a CLI that emits structured JSON findings.
 
+## What it catches
+
+Given this paragraph (typical LLM prose):
+
+```markdown
+In today's rapidly evolving landscape, it's important to note that AI tools
+are revolutionizing how we work - truly transforming workflows in
+unprecedented ways. By harnessing the power of large language models, teams
+can delve into complex challenges, streamline operations, and unlock new
+possibilities. But what does this really mean for you? In essence, the
+future belongs to those who embrace these tools today. Not just to keep up,
+not just to stay competitive, but to thrive.
+```
+
+`npx slopless` returns nine findings across seven rules:
+
+```
+[slopless/generic-signposting]  it's important to note
+[slopless/prohibited-phrases]   it's important to note
+[slopless/llm-vocabulary]       landscape
+[slopless/llm-vocabulary]       delve
+[slopless/prohibited-words]     delve
+[slopless/prohibited-words]     unlock
+[slopless/prohibited-phrases]   the future belongs to
+[slopless/negation-reframe]     Not just X, not just Y, but Z
+[slopless/flesch-kincaid]       Flesch Reading Ease 56.05 (keep >= 61)
+```
+
+Full JSON output is the default. See the [Rules](https://github.com/seochecks-ai/slopless/wiki/Rules) page for the complete inventory.
+
 ## Intended Usage Loop
 
 ```bash
@@ -91,8 +127,23 @@ Something shifted in the room.
 - [Behavior](https://github.com/seochecks-ai/slopless/wiki/Behavior) - CLI flags, exit codes, JSON output shape, direct textlint integration.
 - [Ignore rules](https://github.com/seochecks-ai/slopless/wiki/Ignore-Rules) - inline `textlint-disable` block syntax.
 - [Thanks](https://github.com/seochecks-ai/slopless/wiki/Thanks) - direct rule sources, dependencies, and acknowledgments.
+- [Roadmap](ROADMAP.md) - near-term direction and links to active plans.
 - [Contributing](.github/CONTRIBUTING.md) - open a detailed issue first; PRs must pass the G3TS pre-commit gate.
 
+## Verify the package
+
+Every release since 0.2.13 is published from GitHub Actions via OIDC and carries a [SLSA v1 provenance attestation](https://registry.npmjs.org/-/npm/v1/attestations/slopless@latest) recorded in the [Sigstore](https://www.sigstore.dev/) transparency log.
+
+```bash
+npm audit signatures slopless
+```
+
+This confirms the tarball you installed was built in the published source repository's Actions environment, from the commit the GitHub Release points at.
+
+## Star history
+
+[![Star History Chart](https://api.star-history.com/svg?repos=seochecks-ai/slopless&type=Date)](https://star-history.com/#seochecks-ai/slopless&Date)
+
 ---
 
 Developed by [seochecks.ai](https://seochecks.ai) to keep content specific, useful, and recognizably human.

package/dist/cli.js

@@ -1,7 +1,9 @@
 #!/usr/bin/env node
-import { readFileSync } from "node:fs";
+import { mkdtempSync, readFileSync, writeFileSync } from "node:fs";
 import { cp, rm, stat } from "node:fs/promises";
-import { dirname, resolve } from "node:path";
+import { tmpdir } from "node:os";
+import { dirname, join, relative, resolve } from "node:path";
+import { createRequire } from "node:module";
 import { fileURLToPath } from "node:url";
 import { cli } from "textlint/lib/src/cli.js";
 const FORMAT_FLAGS = new Set(["--format", "-f"]);
@@ -158,6 +160,20 @@ function packageVersion() {
 function packageNodeModules() {
     return resolve(packageRoot(), "..");
 }
+// textlint resolves a config `filters` key by prepending the rules-base-directory,
+// so the comments filter only loads when it sits as a direct sibling of that
+// directory (a flat npm install). Generate the config at runtime with the filter
+// referenced by a path relative to the base directory, which resolves the same
+// filter package under any install layout (flat npm or nested pnpm).
+function writeDefaultConfig() {
+    const require = createRequire(import.meta.url);
+    const filterDir = dirname(require.resolve("textlint-filter-rule-comments/package.json"));
+    const filterKey = relative(packageNodeModules(), filterDir);
+    const configDir = mkdtempSync(join(tmpdir(), "slopless-config-"));
+    const configPath = join(configDir, "slopless.textlintrc.json");
+    writeFileSync(configPath, JSON.stringify({ filters: { [filterKey]: true } }));
+    return configPath;
+}
 async function installSkill(target, force) {
     const source = resolve(packageRoot(), "skills", "slopless");
     const destination = resolve(process.cwd(), skillDestination(target));
@@ -227,10 +243,9 @@ async function main() {
     const args = [
         "node",
         "slopless",
-        "--no-textlintrc",
         ...(hasFlag(userArgs, CONFIG_FLAGS)
             ? []
-            : ["--config", resolve(packageRoot(), "slopless.textlintrc.json")]),
+            : ["--config", writeDefaultConfig()]),
         "--preset",
         "slopless",
         "--rules-base-directory",

package/dist/rules/syntactic-patterns/contrast/private/negation-reframe-matcher.js

@@ -1,5 +1,5 @@
 import { DO_NEGATIONS, EXPLICIT_DO_AUXILIARIES, NEGATION_WORDS, PASSIVE_DEFINITION_VERBS, PRONOUN_REFRAME_STARTS, contrastPivotSubject, findCopularNegation, findNegationIndex, isCompleteSentence, skipOptionalAdverbs, startsWithAny, startsWithSubjectOrPronoun, startsWithSubjectVerb, startsWithWords, stripLeadingPairPivot, validSubject, words } from "./negation-reframe-parts.js";
-import { hasAbstractCommaContrast, hasFactualConnectorAfterNegation, hasMetaContext } from "./negation-context-gates.js";
+import { hasAbstractCommaContrast, hasAbstractNegationPayoff, hasFactualConnectorAfterNegation, hasMetaContext } from "./negation-context-gates.js";
 import { hasInlineContrastConnectorAfterNegation } from "./inline-contrast-connector.js";
 import { inlineNotBecauseReframe } from "./inline-not-because-reframe.js";
 import { inlineNotJustCopularReframe, inlineShortNegatedBeat } from "./inline-short-negation.js";
@@ -39,9 +39,15 @@ function inlineNegationContrast(sentence) {
         INLINE_NON_CONTRAST_NEGATION_FOLLOWERS.has(tokens[negationIndex + 1]?.normalized ?? "")) {
         return undefined;
     }
+    // The connector branch (not ... but/instead/rather ...) is a normal factual
+    // correlative unless the payoff is abstract/evaluative. Requiring an abstract
+    // payoff here is what separates the empty reframe ("not a failure, but a
+    // signal") from ordinary prose ("not constructed by the king, but by his
+    // successor"), which was the dominant false-positive source in the audit.
     return !hasConcreteCorrectionEvidence(sentence.text) &&
         (hasAbstractCommaContrast(sentence, tokens, negation.start) ||
-            hasInlineContrastConnectorAfterNegation(tokens, negationIndex))
+            (hasInlineContrastConnectorAfterNegation(tokens, negationIndex) &&
+                hasAbstractNegationPayoff(tokens)))
         ? {
             end: sentence.end,
             start: sentence.start,

package/dist/rules/syntactic-patterns/repetition/triple-repeat.js

@@ -14,6 +14,148 @@ const REPEATED_FRAME_PREFIXES = [
     ["what", "helps", "is"],
     ["what", "matters", "is"]
 ];
+// A bare repeated opener is only a signal when the word is distinctive. Three
+// sentences opening with a common function word, pronoun, or transition is
+// normal prose (especially in reference writing) and was the dominant source of
+// false positives in the human-corpus audit. The multi-word frame logic below
+// (REPEATED_FRAME_PREFIXES) still catches the high-precision cases.
+const COMMON_OPENERS = new Set([
+    "a",
+    "an",
+    "the",
+    "this",
+    "that",
+    "these",
+    "those",
+    "each",
+    "every",
+    "some",
+    "any",
+    "no",
+    "all",
+    "both",
+    "another",
+    "such",
+    "i",
+    "you",
+    "he",
+    "she",
+    "it",
+    "we",
+    "they",
+    "me",
+    "him",
+    "her",
+    "us",
+    "them",
+    "his",
+    "hers",
+    "its",
+    "our",
+    "ours",
+    "your",
+    "yours",
+    "their",
+    "theirs",
+    "my",
+    "mine",
+    "there",
+    "here",
+    "in",
+    "on",
+    "at",
+    "of",
+    "to",
+    "for",
+    "from",
+    "with",
+    "by",
+    "as",
+    "into",
+    "onto",
+    "over",
+    "under",
+    "after",
+    "before",
+    "during",
+    "through",
+    "between",
+    "among",
+    "about",
+    "against",
+    "within",
+    "without",
+    "upon",
+    "across",
+    "around",
+    "and",
+    "but",
+    "or",
+    "nor",
+    "so",
+    "yet",
+    "because",
+    "although",
+    "though",
+    "while",
+    "if",
+    "when",
+    "whenever",
+    "since",
+    "unless",
+    "until",
+    "whereas",
+    "however",
+    "therefore",
+    "thus",
+    "also",
+    "moreover",
+    "furthermore",
+    "meanwhile",
+    "instead",
+    "still",
+    "besides",
+    "later",
+    "soon",
+    "now",
+    "today",
+    "once",
+    "first",
+    "second",
+    "third",
+    "finally",
+    "overall",
+    "generally",
+    "typically",
+    "often",
+    "usually",
+    "sometimes",
+    "eventually",
+    "initially",
+    "subsequently",
+    "is",
+    "was",
+    "are",
+    "were",
+    "be",
+    "being",
+    "been",
+    "has",
+    "have",
+    "had",
+    "do",
+    "does",
+    "did",
+    "will",
+    "would",
+    "can",
+    "could",
+    "should",
+    "may",
+    "might",
+    "must",
+    "shall"
+]);
 function isWordCharacter(character) {
     return ((character >= "a" && character <= "z") ||
         (character >= "0" && character <= "9") ||
@@ -69,6 +211,8 @@ function findTripleRepeats(text) {
         const secondOpener = firstWord(second.text);
         const thirdOpener = firstWord(third.text);
         if (firstOpener === undefined ||
+            firstOpener === "" ||
+            COMMON_OPENERS.has(firstOpener) ||
             firstOpener !== secondOpener ||
             secondOpener !== thirdOpener) {
             continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "slopless",
-  "version": "0.2.14",
+  "version": "0.2.15",
   "description": "Deterministic textlint rules and CLI for catching prose slop in English Markdown.",
   "keywords": [
     "textlint",