specforge-mcp 0.1.0

package/src/config/migration-policies-catalog.json

@@ -0,0 +1,271 @@
+{
+  "ecosystems": {
+    "npm": {
+      "knownMajors": {
+        "react": 19,
+        "react-dom": 19,
+        "typescript": 5,
+        "vite": 7,
+        "next": 16,
+        "eslint": 9,
+        "jest": 30,
+        "vitest": 3,
+        "webpack": 5,
+        "rollup": 4,
+        "express": 5,
+        "fastify": 5,
+        "zod": 4,
+        "axios": 2,
+        "lodash": 4,
+        "moment": 3,
+        "date-fns": 4,
+        "tailwindcss": 4,
+        "vue": 3,
+        "angular": 19,
+        "svelte": 5,
+        "remix": 3,
+        "astro": 5,
+        "nuxt": 4,
+        "gatsby": 5,
+        "storybook": 8,
+        "prisma": 6,
+        "drizzle-orm": 1,
+        "graphql": 17,
+        "apollo-server": 4,
+        "socket.io": 4,
+        "mongoose": 9,
+        "sequelize": 7,
+        "typeorm": 1,
+        "dotenv": 17,
+        "commander": 13,
+        "chalk": 6,
+        "inquirer": 12
+      },
+      "eolPackages": [
+        { "name": "react", "major": 16, "eolDate": "2023-03-01" },
+        { "name": "react", "major": 17, "eolDate": "2024-01-01" },
+        { "name": "next", "major": 12, "eolDate": "2023-06-01" },
+        { "name": "next", "major": 13, "eolDate": "2024-06-01" },
+        { "name": "vue", "major": 2, "eolDate": "2023-12-31" },
+        { "name": "angular", "major": 14, "eolDate": "2023-11-18" },
+        { "name": "angular", "major": 15, "eolDate": "2024-05-18" },
+        { "name": "webpack", "major": 4, "eolDate": "2022-01-01" }
+      ],
+      "securityRiskPackages": ["node-forge", "minimist", "lodash", "moment"]
+    },
+    "pypi": {
+      "knownMajors": {
+        "django": 5,
+        "fastapi": 1,
+        "pydantic": 2,
+        "flask": 3,
+        "sqlalchemy": 2,
+        "celery": 6,
+        "pytest": 8,
+        "numpy": 2,
+        "pandas": 3,
+        "requests": 3,
+        "httpx": 1,
+        "uvicorn": 1,
+        "alembic": 2,
+        "boto3": 2,
+        "pillow": 11,
+        "cryptography": 44,
+        "aiohttp": 4,
+        "starlette": 1,
+        "typer": 1,
+        "click": 9
+      },
+      "eolPackages": [
+        { "name": "django", "major": 3, "eolDate": "2024-04-01" },
+        { "name": "django", "major": 4, "eolDate": "2026-04-01" },
+        { "name": "flask", "major": 1, "eolDate": "2021-01-01" },
+        { "name": "flask", "major": 2, "eolDate": "2023-12-01" }
+      ],
+      "securityRiskPackages": ["cryptography", "paramiko", "pillow"]
+    },
+    "cargo": {
+      "knownMajors": {
+        "tokio": 1,
+        "serde": 1,
+        "axum": 1,
+        "actix-web": 4,
+        "reqwest": 1,
+        "clap": 4,
+        "anyhow": 1,
+        "thiserror": 2,
+        "tracing": 1,
+        "sqlx": 1,
+        "sea-orm": 1,
+        "diesel": 2,
+        "hyper": 1,
+        "rocket": 1,
+        "warp": 1,
+        "tonic": 1,
+        "prost": 1,
+        "rand": 1,
+        "uuid": 1,
+        "chrono": 1
+      },
+      "eolPackages": [{ "name": "actix-web", "major": 3, "eolDate": "2022-01-01" }],
+      "securityRiskPackages": ["openssl"]
+    },
+    "go": {
+      "knownMajors": {
+        "github.com/gin-gonic/gin": 1,
+        "github.com/gorilla/mux": 1,
+        "github.com/labstack/echo": 4,
+        "github.com/go-chi/chi": 5,
+        "go.uber.org/zap": 1,
+        "github.com/spf13/cobra": 1,
+        "github.com/spf13/viper": 2,
+        "gorm.io/gorm": 1,
+        "github.com/stretchr/testify": 1,
+        "google.golang.org/grpc": 1
+      },
+      "eolPackages": [],
+      "securityRiskPackages": []
+    },
+    "maven": {
+      "knownMajors": {
+        "spring-boot": 3,
+        "quarkus": 3,
+        "micronaut": 4,
+        "jakarta.ee": 10,
+        "hibernate": 7,
+        "log4j": 3,
+        "slf4j": 2,
+        "jackson-databind": 2,
+        "junit": 5,
+        "mockito": 5,
+        "reactor-core": 3,
+        "netty": 4
+      },
+      "eolPackages": [
+        { "name": "spring-boot", "major": 2, "eolDate": "2026-08-31" },
+        { "name": "log4j", "major": 1, "eolDate": "2015-08-05" }
+      ],
+      "securityRiskPackages": ["log4j", "log4j-core"]
+    },
+    "composer": {
+      "knownMajors": {
+        "laravel/framework": 12,
+        "symfony/symfony": 7,
+        "guzzlehttp/guzzle": 7,
+        "doctrine/orm": 3,
+        "phpunit/phpunit": 12,
+        "nesbot/carbon": 3,
+        "twig/twig": 4,
+        "monolog/monolog": 3
+      },
+      "eolPackages": [
+        { "name": "laravel/framework", "major": 9, "eolDate": "2024-02-08" },
+        { "name": "laravel/framework", "major": 10, "eolDate": "2025-08-07" }
+      ],
+      "securityRiskPackages": []
+    },
+    "rubygems": {
+      "knownMajors": {
+        "rails": 7,
+        "sinatra": 4,
+        "rspec": 3,
+        "rspec-rails": 6,
+        "devise": 4,
+        "sidekiq": 7,
+        "rack": 3,
+        "nokogiri": 1,
+        "activerecord": 7,
+        "puma": 6,
+        "capistrano": 3,
+        "factory_bot": 6,
+        "rubocop": 1,
+        "pg": 1,
+        "redis": 5,
+        "httparty": 0,
+        "faraday": 2,
+        "dry-validation": 1
+      },
+      "eolPackages": [
+        { "name": "rails", "major": 5, "eolDate": "2022-06-01" },
+        { "name": "rails", "major": 6, "eolDate": "2024-06-01" }
+      ],
+      "securityRiskPackages": ["nokogiri", "rack"]
+    },
+    "nuget": {
+      "knownMajors": {
+        "Microsoft.AspNetCore.App": 8,
+        "Microsoft.EntityFrameworkCore": 8,
+        "Newtonsoft.Json": 13,
+        "AutoMapper": 12,
+        "FluentValidation": 11,
+        "Serilog": 3,
+        "MediatR": 12,
+        "Dapper": 2,
+        "Polly": 8,
+        "NUnit": 4,
+        "xunit": 2,
+        "Moq": 4,
+        "StackExchange.Redis": 2,
+        "AWSSDK.Core": 3,
+        "Azure.Identity": 1,
+        "Microsoft.Extensions.Logging": 8,
+        "Swashbuckle.AspNetCore": 6,
+        "NLog": 5
+      },
+      "eolPackages": [
+        { "name": "Microsoft.AspNetCore.App", "major": 6, "eolDate": "2024-11-12" },
+        { "name": "Microsoft.AspNetCore.App", "major": 7, "eolDate": "2024-05-14" }
+      ],
+      "securityRiskPackages": ["Newtonsoft.Json"]
+    },
+    "pub": {
+      "knownMajors": {
+        "flutter": 3,
+        "http": 1,
+        "provider": 6,
+        "riverpod": 2,
+        "dio": 5,
+        "shared_preferences": 2,
+        "sqflite": 2,
+        "firebase_core": 2,
+        "go_router": 13,
+        "hive": 2,
+        "get": 4,
+        "bloc": 8,
+        "freezed": 2,
+        "json_serializable": 6,
+        "path_provider": 2,
+        "url_launcher": 6,
+        "image_picker": 1,
+        "flutter_secure_storage": 9
+      },
+      "eolPackages": [{ "name": "flutter", "major": 2, "eolDate": "2023-05-10" }],
+      "securityRiskPackages": ["flutter_secure_storage"]
+    },
+    "swiftpm": {
+      "knownMajors": {
+        "alamofire": 5,
+        "snapkit": 5,
+        "rxswift": 6,
+        "kingfisher": 7,
+        "swiftyjson": 5,
+        "realm-swift": 10,
+        "moya": 15,
+        "swift-collections": 1,
+        "swift-algorithms": 1,
+        "swift-argument-parser": 1,
+        "pointfreeco/swift-composable-architecture": 1,
+        "grpc-swift": 1,
+        "swift-nio": 2,
+        "vapor": 4
+      },
+      "eolPackages": [],
+      "securityRiskPackages": []
+    }
+  },
+  "riskThresholds": {
+    "stableMonthsForMedium": 6,
+    "newReleaseMonthsForLow": 3
+  },
+  "customPolicies": []
+}

package/src/config/otel-tooling.json

@@ -0,0 +1,131 @@
+{
+  "_description": "OTel stack recommendations per language and scale. Used by otel-catalog.ts",
+  "languages": {
+    "javascript": {
+      "sdkPackage": "@opentelemetry/sdk-node",
+      "autoInstrumentation": "@opentelemetry/auto-instrumentations-node",
+      "exporterPackage": "@opentelemetry/exporter-trace-otlp-http",
+      "docsUrl": "https://opentelemetry.io/docs/instrumentation/js/"
+    },
+    "typescript": {
+      "sdkPackage": "@opentelemetry/sdk-node",
+      "autoInstrumentation": "@opentelemetry/auto-instrumentations-node",
+      "exporterPackage": "@opentelemetry/exporter-trace-otlp-http",
+      "docsUrl": "https://opentelemetry.io/docs/instrumentation/js/"
+    },
+    "python": {
+      "sdkPackage": "opentelemetry-sdk",
+      "autoInstrumentation": "opentelemetry-instrumentation-django",
+      "exporterPackage": "opentelemetry-exporter-otlp",
+      "docsUrl": "https://opentelemetry.io/docs/instrumentation/python/"
+    },
+    "go": {
+      "sdkPackage": "go.opentelemetry.io/otel",
+      "autoInstrumentation": "go.opentelemetry.io/contrib/instrumentation",
+      "exporterPackage": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
+      "docsUrl": "https://opentelemetry.io/docs/instrumentation/go/"
+    },
+    "java": {
+      "sdkPackage": "opentelemetry-javaagent.jar",
+      "autoInstrumentation": null,
+      "exporterPackage": "opentelemetry-exporter-otlp",
+      "docsUrl": "https://opentelemetry.io/docs/instrumentation/java/",
+      "level": "zero-code"
+    },
+    "kotlin": {
+      "sdkPackage": "io.opentelemetry:opentelemetry-sdk",
+      "autoInstrumentation": "io.opentelemetry.instrumentation:opentelemetry-instrumentation-api",
+      "exporterPackage": "io.opentelemetry:opentelemetry-exporter-otlp",
+      "docsUrl": "https://opentelemetry.io/docs/instrumentation/java/"
+    },
+    "rust": {
+      "sdkPackage": "opentelemetry",
+      "autoInstrumentation": null,
+      "exporterPackage": "opentelemetry-otlp",
+      "docsUrl": "https://opentelemetry.io/docs/instrumentation/rust/"
+    },
+    "dotnet": {
+      "sdkPackage": "OpenTelemetry.Extensions.Hosting",
+      "autoInstrumentation": "OpenTelemetry.Instrumentation.AspNetCore",
+      "exporterPackage": "OpenTelemetry.Exporter.OpenTelemetryProtocol",
+      "docsUrl": "https://opentelemetry.io/docs/instrumentation/net/"
+    },
+    "csharp": {
+      "sdkPackage": "OpenTelemetry.Extensions.Hosting",
+      "autoInstrumentation": "OpenTelemetry.Instrumentation.AspNetCore",
+      "exporterPackage": "OpenTelemetry.Exporter.OpenTelemetryProtocol",
+      "docsUrl": "https://opentelemetry.io/docs/instrumentation/net/"
+    }
+  },
+  "backends": {
+    "local": {
+      "name": "Jaeger All-in-One",
+      "scale": "development",
+      "dockerImage": "jaegertracing/all-in-one:latest",
+      "dockerCompose": "docker run -d --name jaeger -p 16686:16686 -p 4317:4317 -p 4318:4318 jaegertracing/all-in-one:latest",
+      "docsUrl": "https://www.jaegertracing.io/docs/getting-started/"
+    },
+    "staging": {
+      "name": "OTel Collector + Jaeger",
+      "scale": "staging",
+      "docsUrl": "https://opentelemetry.io/docs/collector/"
+    },
+    "production-small": {
+      "name": "OTel Collector + Grafana Tempo",
+      "scale": "production-small",
+      "docsUrl": "https://grafana.com/docs/tempo/latest/"
+    },
+    "production-enterprise": {
+      "name": "OTel Collector (tail-based sampling) + Cloud Backend",
+      "scale": "production-enterprise",
+      "options": ["Honeycomb", "Datadog", "New Relic", "Grafana Cloud"],
+      "docsUrl": "https://opentelemetry.io/docs/collector/configuration/"
+    }
+  },
+  "ebpf": {
+    "ciliumTetragon": {
+      "name": "Cilium Tetragon",
+      "description": "Security observability and enforcement at kernel level",
+      "docsUrl": "https://tetragon.io/",
+      "level": "advanced"
+    },
+    "pixie": {
+      "name": "Pixie",
+      "description": "Continuous profiling without code changes for Kubernetes",
+      "docsUrl": "https://px.dev/",
+      "level": "advanced"
+    },
+    "odigos": {
+      "name": "Odigos",
+      "description": "Auto-instrumentation OTel without modifying source code",
+      "docsUrl": "https://odigos.io/",
+      "level": "advanced"
+    }
+  },
+  "sloDefaults": {
+    "generic-api": {
+      "availabilityTarget": 99.9,
+      "p99LatencyMs": 500,
+      "errorRatePercent": 0.1,
+      "windowMinutes": 5
+    },
+    "auth-service": {
+      "availabilityTarget": 99.99,
+      "p99LatencyMs": 200,
+      "errorRatePercent": 0.01,
+      "windowMinutes": 1
+    },
+    "payment-gateway": {
+      "availabilityTarget": 99.99,
+      "p99LatencyMs": 300,
+      "errorRatePercent": 0.001,
+      "windowMinutes": 1
+    },
+    "background-worker": {
+      "availabilityTarget": 99.5,
+      "p99LatencyMs": 5000,
+      "errorRatePercent": 1.0,
+      "windowMinutes": 60
+    }
+  }
+}