superjs-core 0.4.3 → 0.4.4

package/CHANGELOG.md

@@ -0,0 +1,91 @@
+# Changelog
+
+## [0.4.0] - 2026-06-28
+
+### Ditambahkan
+- **color module** — `hexToRgb()`, `rgbToHex()`, `lighten()`, `darken()`, `contrastRatio()`, `meetsWCAG()`
+- **core** — `deepEqual()` (deep equality), `pipe()`, `compose()` (function composition)
+- **string** — `formatBytes()`, `randomString()`, `randomBoolean()`, `pluralize()`
+- **collection** — `deepGet()`, `deepSet()` (nested object path access)
+- 810 total tests (18 test files)
+
+### Diubah
+- Semua dokumentasi pake Bahasa Indonesia
+
+## [0.3.9] - 2026-06-28
+
+### Diubah
+- README pake Bahasa Inggris (dulu Indonesia)
+- Description npm diupdate
+
+## [0.3.6] - 2026-06-28
+
+### Diubah
+- 810 total tests (dari 484) — nambah brutal audit suite 273 edge-case tests
+- SUMMARY.md dibuat — dokumentasi fitur lengkap semua module
+
+### Dibenerin
+- 6 bug ditemukan pas brutal audit
+- Semua prototype pollution, ReDoS, crypto tests terverifikasi
+
+## [0.3.5] - 2026-06-28
+
+### Ditambahkan (Ekspansi P1)
+- **async**: Queue (priority task queue), Semaphore, memoizeAsync (stale-while-revalidate)
+- **math**: median, stddev, sampleStddev, percentile, correlation, formatCurrency
+- **string**: levenshtein, fuzzyMatch, maskString (PDPA compliance), terbilang (angka→kata), formatRupiah
+- **collection**: topoSort (Kahn's algorithm), slidingWindows, tumblingWindows
+- **date**: timeAgo (id/en), timeRemaining, Duration, formatDuration, toTimezone, formatInTimezone, WIB/WITA/WIT constants
+
+## [0.3.4] - 2026-06-28
+
+### Ditambahkan (Modul P0)
+- **validation**: isNIK, isNPWP, isPhone, isEmail, isURL — validasi khusus Indonesia
+- **error**: createError, TypedError (10 codes + HTTP status), MultiError, collectErrors
+- **logger**: Logger class, child loggers, console/JSON/file transports, buffered transport
+- 16 modules total, 484 tests passing
+
+## [0.3.3] - 2026-06-28
+
+### Dibenerin
+- `round(1.005, 2)` floating-point bug
+- `parseDate('29/02/2023')` gak throw buat invalid leap year
+- Nambah `sideEffects: false` buat tree-shaking optimal
+
+## [0.3.2] - 2026-06-28
+
+### Ditambahkan
+- Biome linter + formatter config
+- CI workflow dengan matrix testing (Node 18, 20, 22)
+- SECURITY.md buat vulnerability disclosure
+- CHANGELOG.md
+
+### Dibenerin
+- Cross-platform `clean` script
+- GitHub Actions: dep-exray-scan pake superjs-core
+- Hapus keyword "zero-dependency" yang misleading
+
+## [0.3.0] - 2026-06-27
+
+### Diubah
+- `superjs-dep-exray` digabung ke `superjs-core` jadi module built-in
+- Satu package: `npm install superjs-core` dapet semua
+- 7 npm packages di-unpublish/deprecate
+
+### Ditambahkan
+- `dep-exray` module: scanProject, analyzeUsage, generateReport
+- CLI: `npx dep-exray .`
+
+## [0.2.0] - 2026-06-27
+
+### Ditambahkan
+- crypto module: hash, randomHex, base64, generateToken, generateOTP
+- path module: join, resolve, basename, dirname, extname
+
+## [0.1.0] - 2026-06-27
+
+### Ditambahkan
+- Initial release
+- core, math, date, collection, string, async, io, type modules
+- 100+ utility functions
+- Full TypeScript strict mode

package/CONTRIBUTING.md

@@ -0,0 +1,55 @@
+# Kontribusi ke superjs-core
+
+## Setup Development
+
+```bash
+cd packages/core
+npm install
+npx tsup
+npx vitest run
+```
+
+## Cara Nambah Fungsi Baru
+
+1. Tambah fungsi di module yang sesuai `packages/core/src/<module>/`
+2. Export dari `index.ts` module tersebut
+3. Tambah test di `packages/core/tests/`
+4. Jalankan `npx vitest run` (810 tests harus passing)
+5. Jalankan `npx tsup` biar build sukses
+6. Update `SUMMARY.md` sama `README.md`
+
+## Module yang Tersedia
+
+| Module | Lokasi |
+|--------|--------|
+| core | `src/core/` |
+| math | `src/math/` |
+| date | `src/date/` |
+| collection | `src/collection/` |
+| string | `src/string/` |
+| async | `src/async/` |
+| io | `src/io/` |
+| type | `src/type/` |
+| crypto | `src/crypto/` |
+| path | `src/path/` |
+| color | `src/color/` |
+| validation | `src/validation/` |
+| error | `src/error/` |
+| logger | `src/logger/` |
+| dep-exray | `src/dep-exray/` |
+
+## Aturan Commit
+
+Pake [Conventional Commits](https://www.conventionalcommits.org/):
+
+```
+feat(core): nambah deepMerge function
+fix(math): benerin floating point rounding
+docs: update README
+```
+
+## Pull Request
+
+1. Bikin branch dari `master`
+2. Pastikan `npx tsup && npx vitest run` lolos
+3. Buka PR ke `master` dengan judul dan deskripsi jelas

package/PUBLISH.md

@@ -0,0 +1,45 @@
+# Panduan Publishing
+
+## Prasyarat
+
+```bash
+npm login
+```
+
+## Cara Publish superjs-core
+
+```bash
+cd packages/core
+
+# 1. Build
+npx tsup
+
+# 2. Test (810 tests)
+npx vitest run
+
+# 3. Bump version
+npm version patch
+# atau: npm version minor
+# atau: npm version major
+
+# 4. Build ulang setelah version bump
+npx tsup
+
+# 5. Publish ke npm
+npm publish
+
+# 6. Commit dan push ke GitHub
+cd ../..
+git add -A
+git commit -m "chore: bump ke v$(node -p \"require('./packages/core/package.json').version\")"
+git push origin master
+```
+
+## Checklist Sebelum Publish
+
+- [ ] `npx tsup` — build sukses
+- [ ] `npx vitest run` — 810 tests pass
+- [ ] `npm login` — udah login
+- [ ] Changelog udah diupdate
+- [ ] README udah sesuai
+- [ ] Git commit — semua perubahan ter-commit

package/ROADMAP.md

@@ -0,0 +1,72 @@
+# Roadmap SuperJS
+
+## v0.4.0 — Modul Indonesia & Error Foundation ✅ (Selesai)
+
+### Modul Baru
+- ✅ **validation** — `isNIK()`, `isNPWP()`, `isPhone("id")`, `isEmail()`, `isURL()` — zero-dep, khusus Indonesia
+- ✅ **error** — `createError()` factory, `MultiError`, typed error codes
+- ✅ **logger** — Structured logger zero-dep, child loggers, file transport
+- ✅ **color** — `hexToRgb()`, `lighten()`, `darken()`, `contrastRatio()`, `meetsWCAG()`
+
+### Ekspansi Modul Existing
+- ✅ **core** — `deepEqual()`, `pipe()`, `compose()`
+- ✅ **string** — `maskString()`, `levenshtein()`, `fuzzyMatch()`, `terbilang()`, `formatRupiah()`, `formatBytes()`, `pluralize()`
+- ✅ **math** — `median()`, `stddev()`, `percentile()`, `correlation()`, `formatCurrency()`
+- ✅ **async** — `Queue()`, `Semaphore`, `memoizeAsync()`
+- ✅ **collection** — `topoSort()` (Kahn), `slidingWindows()`, `deepGet()`, `deepSet()`
+- ✅ **date** — `timeAgo()`, `Duration`, `formatDuration()`, `toTimezone()`, WIB/WITA/WIT
+
+---
+
+## v0.5.0 — Production Toolkit (Next)
+
+### Ekspansi
+- **validation** — Tambah `isEmail()` detail check, `isURL()` lebih ketat
+- **io** — `parseJSONL()`, streaming CSV parser
+- **crypto** — AES-GCM encrypt/decrypt, HMAC signing, hapus xorCipher
+
+### Infrastructure
+- TypeDoc generated API docs (biar gampang referensi)
+- Benchmark suite vs lodash/moment
+- VS Code Extension publish ke Marketplace
+
+---
+
+## v0.6.0 — Advanced
+
+### Modul Baru
+- **signal** — Reactive primitives: `signal()`, `computed()`, `effect()` — framework-agnostic
+- **ml** — `cosineSimilarity()`, confusion matrix, F1 score, k-means clustering
+
+### Ekspansi
+- **crypto** — JWT lite buat edge runtime
+- **type** — Schema validation lite
+
+---
+
+## v1.0.0 — Stable API
+
+- API freeze — no breaking changes setelah v1.0
+- Dependabot + Renovate configured
+- Co-maintainer onboarding
+
+---
+
+## Prioritas Matrix
+
+| Item | Impact | Effort | Priority |
+|------|--------|--------|----------|
+| validation module (isNIK, isNPWP, isPhone) | 🔥🔥🔥 | 🟢 Small | ✅ P0 |
+| error module | 🔥🔥🔥 | 🟢 Small | ✅ P0 |
+| logger module | 🔥🔥🔥 | 🟢 Small | ✅ P0 |
+| color module | 🔥🔥 | 🟢 Small | ✅ P0 |
+| string: terbilang, formatRupiah, maskString | 🔥🔥🔥 | 🟢 Small | ✅ P0 |
+| math: median, stddev, percentile | 🔥🔥 | 🟢 Small | ✅ P1 |
+| async: Queue, Semaphore | 🔥🔥 | 🟡 Medium | ✅ P1 |
+| core: pipe, compose, deepEqual | 🔥🔥🔥 | 🟡 Medium | ✅ P1 |
+| collection: topoSort, deepGet, deepSet | 🔥🔥 | 🟡 Medium | ✅ P1 |
+| date: timeAgo, Duration, tz helpers | 🔥🔥 | 🟡 Medium | ✅ P1 |
+| io: JSONL parser, streaming CSV | 🔥🔥 | 🟡 Medium | P2 |
+| crypto: AES-GCM, HMAC, JWT | 🔥🔥🔥 | 🔴 Large | P2 |
+| signal module | 🔥🔥 | 🔴 Large | P2 |
+| ml module | 🔥🔥 | 🔴 Large | P3 |

package/SECURITY.md

@@ -0,0 +1,35 @@
+# Kebijakan Keamanan
+
+## Melaporkan Kerentanan
+
+Kalau lo nemu celah keamanan di superjs-core, lapor lewat email: adityasuperdev@gmail.com
+
+**JANGAN bikin GitHub issue publik untuk kerentanan keamanan.**
+
+Lo bakal dapet respon dalam 48 jam. Kalo belum ada kabar, follow-up lewat email.
+
+## Yang Perlu Disertakan
+
+- Deskripsi kerentanan
+- Langkah-langkah reproduksi
+- Versi yang terpengaruh
+- Dampak potensial
+- Saran perbaikan (kalo ada)
+
+## Ruang Lingkup
+
+- Package npm superjs-core
+- CLI tool dep-exray
+- GitHub Actions workflows
+
+## Di Luar Ruang Lingkup
+
+- Fungsi `xorCipher` di module crypto **SENG A JA BUKAN untuk keamanan**. Itu cuma XOR obfuscation sederhana buat masking data ringan. Jangan pake buat enkripsi data sensitif.
+
+## Kebijakan Disclosure
+
+Begitu kerentanan dikonfirmasi:
+1. Kita bakal kerjain fix
+2. Security advisory bakal dipublish di GitHub
+3. Versi yang udh di-patch bakal dirilis ke npm
+4. Kredit bakal dikasih ke pelapor (kalo mau)

package/SUMMARY.md

@@ -0,0 +1,317 @@
+# superjs-core — Ringkasan Fitur Lengkap
+
+> **Versi:** 0.4.0 | **License:** MIT | **Zero runtime dependencies**
+
+```
+npm install superjs-core
+```
+
+---
+
+## 1. CORE — Utility Functions
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `deepClone(value)` | Deep clone dengan circular reference, Date, RegExp, Map, Set support |
+| `deepMerge(...objects)` | Deep merge multiple objects, nested overwrite |
+| `deepEqual(a, b)` | Deep equality check — object, array, Date, Map, Set, RegExp |
+| `pipe(initial, ...fns)` | Function composition left-to-right |
+| `compose(...fns)` | Function composition right-to-left |
+| `debounce(fn, wait, options?)` | Debounce dengan leading/trailing/maxWait |
+| `throttle(fn, wait)` | Throttle execution |
+| `memoize(fn, resolver?)` | Memoize dengan custom cache key |
+| `retry(fn, options?)` | Retry dengan exponential backoff |
+| `noop()` | No-operation function |
+| `identity(value)` | Return input unchanged |
+| `once(fn)` | Execute function sekali doang |
+
+---
+
+## 2. MATH
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `add(a, b)` | Safe addition (0.1+0.2=0.3) |
+| `sub(a, b)` | Safe subtraction |
+| `mul(a, b)` | Safe multiplication |
+| `div(a, b)` | Safe division (throw kalo /0) |
+| `round(value, precision?)` | Round dengan floating-point fix |
+| `floor(value, precision?)` | Floor dengan precision |
+| `ceil(value, precision?)` | Ceil dengan precision |
+| `clamp(value, min, max)` | Clamp ke range |
+| `sum(values)` | Sum of array |
+| `average(values)` | Average (throw kalo kosong) |
+| `randomInt(min, max)` | Random integer dalam range |
+| `inRange(value, min, max)` | Cek apakah dalam range |
+| `median(values)` | Median dari array |
+| `stddev(values)` | Population standard deviation |
+| `sampleStddev(values)` | Sample standard deviation |
+| `percentile(values, p)` | Persentil (0-100) |
+| `correlation(x, y)` | Pearson correlation |
+| `formatCurrency(value, options?)` | Format mata uang locale-aware |
+
+---
+
+## 3. DATE & TIME
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `formatDate(date, format?)` | Format tanggal (YYYY-MM-DD, DD/MM/YYYY, dll) |
+| `parseDate(input)` | Parse string/number/Date |
+| `dateDiff(date1, date2)` | Selisih antar tanggal |
+| `addDays(date, days)` | Tambah/kurang hari |
+| `addMonths(date, months)` | Tambah/kurang bulan |
+| `addYears(date, years)` | Tambah/kurang tahun |
+| `startOfDay(date)` | Awal hari (00:00:00.000) |
+| `endOfDay(date)` | Akhir hari (23:59:59.999) |
+| `isWeekend(date)` | Sabtu atau Minggu |
+| `isLeapYear(year)` | Cek tahun kabisat |
+| `isBefore(date1, date2)`, `isAfter`, `isBetween` | Perbandingan tanggal |
+| `isBusinessDay(date)` | Senin-Jumat |
+| `addBusinessDays(date, days)` | Tambah hari kerja |
+| `calculateAge(birthDate)` | Hitung umur dalam tahun |
+| `timeAgo(date, options?)` | Waktu relatif ("5 detik yang lalu") |
+| `timeRemaining(target, options?)` | Waktu menuju tanggal masa depan |
+| `formatDuration(duration, options?)` | Format Duration object |
+| `toTimezone(date, offsetHours)` | Konversi date ke timezone tertentu |
+| `formatInTimezone(date, format, offset)` | Format tanggal di timezone tertentu |
+
+### Konstanta: `TIMEZONE_WIB` (7), `TIMEZONE_WITA` (8), `TIMEZONE_WIT` (9) 🇮🇩
+
+---
+
+## 4. COLLECTION — Array & Object Utilities
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `groupBy(items, keyFn)` | Grouping berdasarkan key |
+| `keyBy(items, keyFn)` | Indexing berdasarkan key |
+| `omit(obj, keys)` | Hapus keys tertentu |
+| `pick(obj, keys)` | Ambil keys tertentu |
+| `pluck(items, key)` | Extract property dari array |
+| `shuffle(items)` | Fisher-Yates shuffle |
+| `sample(items)` | Random element |
+| `sampleSize(items, size)` | N random elements |
+| `chunk(items, size)` | Potong array jadi chunk |
+| `sortBy(items, ...criteria)` | Multi-criteria sort |
+| `orderBy(items, key, dir?)` | Sort by key + direction |
+| `uniqueBy(items, keyFn)` | Unique by key function |
+| `flatten(items)` | Flatten satu level |
+| `uniq(items)` | Hapus duplicate |
+| `first(items)`, `last(items)` | Element pertama/terakhir |
+| `isEmpty(value)` | Cek kosong |
+| `topoSort(items)` | Topological sort (Kahn's algorithm) |
+| `slidingWindows(items, size, step?)` | Overlapping windows |
+| `tumblingWindows(items, size)` | Non-overlapping chunks |
+| `deepGet(obj, path, default?)` | Akses nested object pake path string |
+| `deepSet(obj, path, value)` | Set nested object pake path string |
+
+---
+
+## 5. STRING — Text Manipulation 🇮🇩
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `capitalize(str)` | Kapitalisasi huruf pertama |
+| `camelCase(str)` | Konversi ke camelCase |
+| `kebabCase(str)` | Konversi ke kebab-case |
+| `snakeCase(str)` | Konversi ke snake_case |
+| `pascalCase(str)` | Konversi ke PascalCase |
+| `truncate(str, max, suffix?)` | Potong string dengan suffix |
+| `template(str, data)` | Interpolasi string `{{key}}` |
+| `uuid()` | RFC 4122 v4 UUID |
+| `nanoid(size?, alphabet?)` | URL-safe random ID |
+| `escapeHtml(str)` | Escape HTML entities |
+| `unescapeHtml(str)` | Unescape HTML entities |
+| `levenshtein(a, b)` | Levenshtein distance |
+| `fuzzyMatch(str, query)` | Fuzzy string match |
+| `maskString(str, options?)` | Masking data sensitif |
+| `slugify(str)` | URL-friendly slug |
+| `formatBytes(bytes, options?)` | Format ukuran file ("1 MB") |
+| `randomString(length?)` | Random alphanumeric |
+| `randomBoolean()` | Random true/false |
+| `pluralize(count, singular)` | English pluralization |
+
+### 🇮🇩 Indonesian Locale
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `terbilang(value)` | **Angka ke kata** ("satu juta lima ratus ribu") |
+| `formatRupiah(value, options?)` | **Format Rupiah** ("Rp1.500.000") |
+
+---
+
+## 6. ASYNC
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `sleep(ms)` | Delay eksekusi |
+| `timeout(promise, ms)` | Reject kalo timeout |
+| `raceWithTimeout(promise, ms)` | Race promise vs timeout |
+| `allSettledMap(items, fn)` | Map dengan allSettled |
+| `parallelMap(items, fn, concurrency?)` | Concurrent map dengan limit |
+| `retryAsync(fn, options?)` | Retry dengan backoff |
+| `pipeline(initial, ...fns)` | Async function composition |
+| `deferred()` | Deferred promise |
+| `Queue(options?)` | Priority task queue dengan concurrency |
+| `Semaphore(concurrency)` | Semaphore buat resource control |
+| `memoizeAsync(fn, options?)` | Async memoize dengan TTL + stale-while-revalidate |
+
+---
+
+## 7. IO
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `parseCsv(input, options?)` | Parse CSV string |
+| `stringifyCsv(data, options?)` | Convert records ke CSV |
+| `safeJsonParse(input, default?)` | Safe JSON parse |
+| `env(name, default?)` | Baca environment variable |
+| `envInt(name, default?)` | Baca env var sebagai integer |
+| `envBool(name, default?)` | Baca env var sebagai boolean |
+
+---
+
+## 8. TYPE — Type Guards
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `isString`, `isNumber`, `isBoolean`, `isObject`, `isArray`, `isFunction` | Type checks |
+| `isDate`, `isRegExp`, `isMap`, `isSet`, `isPromise` | Instance checks |
+| `isNull`, `isUndefined`, `isNil` | Nullish checks |
+| `isEmpty(value)` | Empty/blank check |
+| `assertDefined(value, msg?)` | Runtime assertion |
+| `assertType(value, guard, msg?)` | Type assertion |
+| `ensureArray(value)` / `castArray(value)` | Wrap in array |
+| `getType(value)` | String type name |
+
+---
+
+## 9. CRYPTO
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `hash(str)` | djb2 hash (32-bit) |
+| `simpleHash(str)` | Simple hex hash |
+| `randomHex(size?)` | Random hex string |
+| `base64Encode(str)` | Base64 encode (UTF-8 safe) |
+| `base64Decode(str)` | Base64 decode |
+| `generateToken(bytes?)` | Crypto-random hex token |
+| `generateOTP(length?)` | Numeric OTP |
+| `xorCipher(str, key)` | ⚠️ XOR obfuscation (BUKAN encryption) |
+| `checksum(input)` | CRC-like checksum |
+| `constantTimeEqual(a, b)` | Timing-safe string comparison |
+
+---
+
+## 10. PATH
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `join(...segments)` | Gabung path segments |
+| `resolve(...segments)` | Resolve ke absolute path |
+| `basename(p, ext?)` | Ambil filename |
+| `dirname(p)` | Ambil directory |
+| `extname(p)` | Ambil extension |
+| `normalize(p)` | Normalize path |
+| `isAbsolute(p)` | Cek absolute path |
+| `relative(from, to)` | Relative path |
+| `parse(p)` | Parse path jadi components |
+| `format(parsed)` | Format parsed path |
+
+---
+
+## 11. VALIDATION — 🇮🇩 Khusus Indonesia
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `isNIK(value)` | **Validasi NIK** 16 digit + tanggal lahir |
+| `isNPWP(value)` | **Validasi NPWP** + checksum |
+| `isPhone(value, country?)` | **Validasi nomor HP Indonesia** |
+| `isEmail(value)` | Validasi email RFC-compliant |
+| `isURL(value)` | Validasi URL (http/https) |
+
+---
+
+## 12. ERROR — Typed Errors
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `createError(code, message, options?)` | Bikin typed error dengan HTTP status |
+| `isTypedError(error)` | Type guard |
+| `TypedError` | Class dengan code + status + details + toJSON |
+| `MultiError` | Kumpulin multiple errors |
+| `collectErrors(fn)` | Jalanin function, kumpulin error yang ke-throw |
+
+### Error Codes: `BAD_REQUEST` (400), `UNAUTHORIZED` (401), `FORBIDDEN` (403), `NOT_FOUND` (404), `CONFLICT` (409), `VALIDATION_ERROR` (422), `TOO_MANY` (429), `INTERNAL` (500), `BAD_GATEWAY` (502), `UNAVAILABLE` (503)
+
+---
+
+## 13. LOGGER — Structured Logging
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `Logger(options?)` | Structured logger dengan level |
+| `logger` | Default singleton (info level) |
+| `createConsoleTransport(options?)` | Colored console output |
+| `createJsonTransport(options?)` | JSON-line output |
+| `createFileTransport(filename, options?)` | File appender |
+| `createBufferedTransport(transport, options?)` | Batched transport |
+
+### Log Levels: `debug`, `info`, `warn`, `error`
+
+---
+
+## 14. COLOR — Color Utilities
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `hexToRgb(hex)` | Convert hex ke RGB object |
+| `rgbToHex(r, g, b)` | Convert RGB ke hex string |
+| `lighten(hex, percent)` | Terangin warna (0-100%) |
+| `darken(hex, percent)` | Gelapin warna (0-100%) |
+| `contrastRatio(hex1, hex2)` | WCAG contrast ratio (1-21) |
+| `meetsWCAG(hex1, hex2, level?)` | Cek WCAG compliance (AA/AAA) |
+
+---
+
+## 15. DEP-EXRAY — Dependency Health Scanner
+
+| Fungsi | Deskripsi |
+|--------|-----------|
+| `scanProject(config)` | Scan project buat bloat + security issues |
+| `generateReport(result, json?)` | Generate scan report |
+| `analyzeUsage(projectPath, packageName)` | Deteksi pemakaian dependency |
+| `KNOWN_MAPPINGS` | 11 known replacement mappings |
+| `KNOWN_CVES` | CVE database untuk known packages |
+
+**CLI:** `npx dep-exray .`
+
+---
+
+## Statistik Test
+
+| Module | Test Files | Tests |
+|--------|-----------|-------|
+| Semua module | 18 | **810** ✅ |
+
+---
+
+## Referensi Cepat
+
+```bash
+npm install superjs-core
+
+# Import semua module
+import { deepClone, deepEqual, pipe } from 'superjs-core'
+import { formatDate, timeAgo, TIMEZONE_WIB } from 'superjs-core/date'
+import { groupBy, topoSort, deepGet } from 'superjs-core/collection'
+import { terbilang, formatRupiah, formatBytes } from 'superjs-core/string'
+import { Queue, Semaphore } from 'superjs-core/async'
+import { isNIK, isNPWP, isPhone } from 'superjs-core/validation'
+import { createError, MultiError } from 'superjs-core/error'
+import { Logger } from 'superjs-core/logger'
+import { hexToRgb, lighten, contrastRatio } from 'superjs-core/color'
+import { median, stddev, formatCurrency } from 'superjs-core/math'
+import { scanProject } from 'superjs-core/dep-exray'
+```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "superjs-core",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "description": "JavaScript toolkit all-in-one buat developer Indonesia: validasi NIK/NPWP/Phone, terbilang, formatRupiah, timeAgo (WIB/WITA/WIT), deepClone, logger, dep scanner. 100+ fungsi, zero dep runtime.",
   "type": "module",
   "main": "./dist/index.js",
@@ -105,7 +105,8 @@
   },
   "sideEffects": false,
   "files": [
-    "dist"
+    "dist",
+    "*.md"
   ],
   "scripts": {
     "build": "tsup",