v11y-check 0.11.0 → 0.11.1

package/README.md

@@ -2,20 +2,12 @@
 
 Wraps [audit-ci](https://github.com/IBM/audit-ci) with a richer config model, typed JSON source of truth, and a sync workflow that automates allowlist management.
 
-<!-- section:release-notes -->
-## Release notes — v0.11.0 (2026-07-13)
-
-### 🎉 Features
-
-- 🚨 **Breaking:** Fail a package that declares types but ships none (#467)
-
-  `nmr attw` now fails a package that claims to ship type declarations but ships none. Such a package used to pass, leaving every TypeScript consumer of it silently typed as `any`.
-
-    A package that ships working declarations found only by sitting beside its JavaScript entry point escapes the check, since it declares nothing. Add a `types` entry to bring it under the check.
-<!-- /section:release-notes -->
+<!-- section:release-notes --><!-- /section:release-notes -->
 
 ## Installation
 
+Requires Node.js 24 or later.
+
 ```shell
 pnpm add -D v11y-check
 ```

package/dist/esm/cli.js

@@ -42,7 +42,7 @@ export async function auditCommand(options) {
                         process.stderr.write(`warning: ${warning}\n`);
                     }
                     for (const r of parsed.results) {
-                        if (!allResults.some((existing) => existing.id === r.id)) {
+                        if (allResults.every((existing) => existing.id !== r.id)) {
                             allResults.push(r);
                         }
                     }

package/dist/esm/format-check.js

@@ -72,10 +72,7 @@ function hasFindings(result) {
         result.belowThreshold.length > 0);
 }
 function formatScopeFindings(result, now) {
-    const lines = [];
-    for (const vuln of result.unallowed) {
-        lines.push(formatUnallowedLine(vuln));
-    }
+    const lines = Array.from(result.unallowed, (vuln) => formatUnallowedLine(vuln));
     for (const vuln of result.allowed) {
         lines.push(formatAllowedLine(vuln, now));
     }

package/dist/esm/format-verbose.js

@@ -9,14 +9,11 @@ const SCOPE_HEADERS = {
     prod: '-- \u{1F4E6} prod --',
     dev: '-- \u{1F527} dev --',
 };
-const DETAIL_INDENT = '     ';
+const DETAIL_INDENT = ' '.repeat(5);
 const WRAP_COLUMNS = 72;
 export function formatCheckVerboseText(result, scopes, now, thresholds) {
     const effectiveNow = now ?? new Date();
-    const sections = [];
-    for (const scope of scopes) {
-        sections.push(formatScopeVerbose(scope, result[scope], effectiveNow, thresholds?.[scope]));
-    }
+    const sections = Array.from(scopes, (scope) => formatScopeVerbose(scope, result[scope], effectiveNow, thresholds?.[scope]));
     const actions = formatActionHints(result, scopes);
     const body = sections.join('\n\n') + '\n';
     if (actions.length === 0)
@@ -41,10 +38,7 @@ function formatScopeVerbose(scope, result, now, threshold) {
         lines.push('  (none)');
         return lines.join('\n');
     }
-    const blocks = [];
-    for (const vuln of result.unallowed) {
-        blocks.push(formatUnallowedBlock(vuln));
-    }
+    const blocks = Array.from(result.unallowed, (vuln) => formatUnallowedBlock(vuln));
     for (const vuln of result.allowed) {
         blocks.push(formatAllowedBlock(vuln, now));
     }

package/dist/esm/run-audit.js

@@ -92,10 +92,11 @@ function extractPaths(advisory) {
     const ordered = [];
     for (const finding of advisory.findings) {
         for (const pathValue of finding.paths) {
-            if (!seen.has(pathValue)) {
-                seen.add(pathValue);
-                ordered.push(pathValue);
+            if (seen.has(pathValue)) {
+                continue;
             }
+            seen.add(pathValue);
+            ordered.push(pathValue);
         }
     }
     return ordered;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "v11y-check",
-  "version": "0.11.0",
+  "version": "0.11.1",
   "private": false,
   "description": "Wrap audit-ci with a richer config model, typed JSON source of truth, and sync workflow",
   "keywords": [
@@ -40,10 +40,10 @@
   "dependencies": {
     "audit-ci": "7.1.0",
     "zod": "4.4.3",
-    "@williamthorsen/nmr-core": "0.7.0"
+    "@williamthorsen/nmr-core": "0.7.1"
   },
   "engines": {
-    "node": ">=18.17.0"
+    "node": ">=24"
   },
   "scripts": {}
 }