Software-GesundheitsberichtSchema 0.26.0 · Metriken 1.13.0 · 2026-07-22 10:36 UTC

kkomelin / isomorphic-dompurify

Use DOMPurify on server and client in the same way

TypeScriptMIT★ 590 Sterne⑂ 16 Forksseit März 2020Auf GitHub ansehen ↗

#dompurify #xss-filter #xss #isomorphic #wrapper #universal #ssr #html-escape #security #sanitize #sanitize-html #sanitizer #isomorphic-dompurify

kkomelin/isomorphic-dompurify erreicht einen Gesundheitsindex von 73 von 100 und liegt damit im Bereich Gut. Am stärksten schneidet es bei Vitality (95/100) ab, am schwächsten bei Security (58/100). Zuletzt vor 1 Tag aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.

gesamt / 100

Gut

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien

Gut70-84Gesund; geringfügige Lücken

Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen

Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht

Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

Konstantin KomelinPersönliches Konto

102 Follower81 öffentliche Reposseit Apr. 2011@kometolabs

Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.

Paket-Ökosysteme

Registry	Paket	Version	Downloads / Monat	Versionen	Zuletzt veröffentlicht	Tags
npm	isomorphic-dompurify	3.19.0	20.785.134	104	vor 4 Tagen	security dompurify xss-filter xss isomorphic wrapper universal ssr html-escape sanitize sanitize-html sanitizer

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

95Exzellent · 22 % des Gesamtindex

Entwicklungsaktivität

92Exzellent

Wie die Bewertung erfolgt

36/36	Push-Aktualität — letzter Push vor 1 Tagen
28.4/36	Commit-Rhythmus — 41/52 Wochen mit Commits
18/18	Commit-Volumen — 210 Commits im letzten Jahr
10/10	OpenSSF Scorecard: Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10

Verwendete Eingangsdaten

commits_last_year	210
human_commit_share	0,44
days_since_last_push	1
active_weeks_last_year	41

Release-Disziplin

100Exzellent

Wie die Bewertung erfolgt

27/27	Liefert Releases aus — 100 Releases veröffentlicht
36/36	Release-Aktualität — letztes Release vor 4 Tagen
27/27	Release-Rhythmus — ein Release etwa alle 9,5 Tage
0/10	OpenSSF Scorecard: Signed-Releases — keine Daten

Verwendete Eingangsdaten

releases_count	100
latest_release_tag	3.19.0
releases_from_tags	nein
days_since_latest_release	4
mean_days_between_releases	9,5

Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

65Mittel · 18 % des Gesamtindex

Popularität & Verbreitung

56Mittel

Wie die Bewertung erfolgt

44.9/60	Stars — 590 Stars
9.8/25	Forks — 16 Forks
1.7/15	Watcher — 3 Watcher

Verwendete Eingangsdaten

forks	16
stars	590
watchers	3
growth_state	unverified
growth_factor_pct	100
growth_unverified_reason	no_history

Community-Gesundheit

50Mittel

Wie die Bewertung erfolgt

22.5/22.5	README
22.5/22.5	Lizenz — anerkannte Lizenz (MIT)
0/18	CONTRIBUTING-Leitfaden
0/13.5	Verhaltenskodex
0/7.2	Issue-Vorlage
0/6.3	PR-Vorlage

Verwendete Eingangsdaten

has_readme	ja
has_license	ja
has_contributing	nein
has_issue_template	nein
has_code_of_conduct	nein
has_pull_request_template	nein

Ökosystem-Verbreitung (Downloads)

100Exzellent

Wie die Bewertung erfolgt

80/80	Downloads pro Monat — 20.785.134 Downloads/Monat über npm
0/20	Abhängige in der Registry — von diesem Ökosystem nicht ausgewiesen

Verwendete Eingangsdaten

packages	isomorphic-dompurify
dependents	—
ecosystems	npm
total_downloads	—
monthly_downloads	20.785.134

Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Abhängige in der Registry. Die verbleibenden Gewichte wurden renormalisiert.

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

62Mittel · 24 % des Gesamtindex

Maintainer-Resilienz (Bus-Faktor)

22Kritisch

Wie die Bewertung erfolgt

9/54	Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab
0.3/22.5	Commit-Verteilung — wichtigste beitragende Person verfasste 99 % der Commits
9.5/13.5	Breite der Beitragenden — 7 Beitragende
3/10	OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3

Verwendete Eingangsdaten

bus_factor	1
contributors_sampled	7
top_contributor_share	0,987

Reaktionsfähigkeit bei Issues & PRs

81Gut

Wie die Bewertung erfolgt

45/46.8	Issue-Lösungsquote — 96 % der Issues geschlossen
35.7/38.3	PR-Annahme — 377/404 entschiedene PRs gemergt
0/15	OpenSSF Scorecard: Code-Review — Found 0/9 approved changesets -- score normalized to 0

Verwendete Eingangsdaten

merged_prs	377
open_issues	2
closed_issues	50
issue_closed_ratio	0,962
closed_unmerged_prs	27

Eigentümerschaft & Trägerschaft

62Mittel

Wie die Bewertung erfolgt

10/30	Organisatorische Trägerschaft — persönliches (Nutzer-)Konto
0/20	Verifizierte Domain — für Nutzerkonten nicht anwendbar
14.5/25	Reichweite des Inhabers — 102 Follower von kkomelin
25/25	Kontohistorie — 81 öffentliche Repos, Kontoalter ca. 15 Jahre

Verwendete Eingangsdaten

followers	102
owner_type	User
is_verified	—
owner_login	kkomelin
public_repos	81
account_age_days	5.564

Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.

Paketpflege

100Exzellent

Wie die Bewertung erfolgt

25/25	Veröffentlicht & auflösbar — 1 Paket(e) auf npm
35/35	Veröffentlichungsaktualität — letzte Veröffentlichung vor 4 Tagen
20/20	Versionshistorie — 104 veröffentlichte Versionen
20/20	Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen

Verwendete Eingangsdaten

packages	isomorphic-dompurify
ecosystems	npm
any_deprecated	nein
min_days_since_publish	4

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

79Gut · 20 % des Gesamtindex

Engineering-Praktiken

82Gut

Wie die Bewertung erfolgt

24/24	CI-Workflows — 1 Workflow(s)
24/24	Tests vorhanden
16/16	Linter-Konfiguration — biome.json
0/9.6	Pre-Commit-Hooks
0/6.4	.editorconfig
18/20	OpenSSF Scorecard: CI-Tests — 19 out of 21 merged PRs checked by a CI test -- score normalized to 9

Verwendete Eingangsdaten

has_ci	ja
has_tests	ja
has_editorconfig	nein
has_linter_config	ja
has_precommit_config	nein

Dokumentation

75Gut

Wie die Bewertung erfolgt

30/30	README
0/25	Dokumentationsverzeichnis
15/15	Dokumentations-/Homepage-Site — https://www.npmjs.com/package/isomorphic-dompurify
10/10	Repository-Beschreibung
10/10	Topics — 13 Topics
10/10	Wiki

Verwendete Eingangsdaten

topics	dompurify, xss-filter, xss, isomorphic, wrapper, universal, ssr, html-escape, security, sanitize, sanitize-html, sanitizer, isomorphic-dompurify
has_wiki	ja
homepage	https://www.npmjs.com/package/isomorphic-dompurify
has_readme	ja
has_docs_dir	nein
has_description	ja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

58Mittel · 16 % des Gesamtindex

Sicherheitslage

47Gefährdet

Wie die Bewertung erfolgt

7.5/7.5	Binary-Artifacts — no binaries found in the repo
0/7.5	Branch-Protection — branch protection not enabled on development/release branches
2.2/2.5	CI-Tests — 19 out of 21 merged PRs checked by a CI test -- score normalized to 9
0/2.5	CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5	Code-Review — Found 0/9 approved changesets -- score normalized to 0
0.8/2.5	Contributors — project has 1 contributing companies or organizations -- score normalized to 3
10/10	Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5	Dependency-Update-Tool — update tool detected
0/5	Fuzzing — project is not fuzzed
2.5/2.5	Lizenz — license file detected
7.5/7.5	Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
0/5	Packaging — keine Daten
0/5	Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5	SAST — SAST tool is not run on all commits -- score normalized to 0
0/5	Security-Policy — security policy file not detected
0/7.5	Signed-Releases — keine Daten
0/7.5	Token-Permissions — detected GitHub workflow tokens with excessive permissions
5.2/7.5	Vulnerabilities — 3 existing vulnerabilities detected

Verwendete Eingangsdaten

source	openssf_scorecard
checks_evaluated	16
scorecard_version	v5.5.0
checks_inconclusive	2
scorecard_aggregate	4,7

Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.

Abhängigkeits-Advisories

100Exzellent

Wie die Bewertung erfolgt

35/35	Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
0/25	Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar
0/40	Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum

Verwendete Eingangsdaten

source	osv
advisories	3
affected_packages	2
assessed_packages	237
unassessed_packages	0
affected_by_severity	high 1, low 1
direct_affected_packages	0

Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories, Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. 237 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

66Mittel · 0 % des Gesamtindex

AI-Agentenkontext & Leitlinien

40Gefährdet

Wie die Bewertung erfolgt

0/45	Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15	Maschinenlesbare Doku (llms.txt)
40/40	Lesbare Commit-Historie — 42 von 44 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)

Verwendete Eingangsdaten

has_llms_txt	nein
legible_history_share	0,955
agent_instruction_files	—
agent_instruction_max_bytes	—

AI-Verify-Loop (Build / Test / Typprüfung)

72Gut

Wie die Bewertung erfolgt

0/18	Bootstrap mit einem Befehl
22/22	Automatisierte Tests
11/11	Lint-/Format-Konfiguration — biome.json
11/11	Statische Typprüfung — tsconfig.json
10/10	Reproduzierbare Umgebung — lockfile
10/10	Belegte Agentenpraxis — 27 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben
8/8	Automatisierte Wartung — 56 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates
0/10	OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0

Verwendete Eingangsdaten

has_nix	nein
has_tests	ja
lockfiles	pnpm-lock.yaml
has_dockerfile	nein
typed_language	ja
bootstrap_files	—
has_devcontainer	nein
has_linter_config	ja
typecheck_configs	tsconfig.json
agent_commit_share	0,27
toolchain_manifests	—
dependency_bot_commit_share	0,56

AI-Code-Lesbarkeit für Modelle

100Exzellent

Wie die Bewertung erfolgt

45/45	Typprüfbarer Code — TypeScript (statisch typisiert)
55/55	Handhabbare Dateigrößen — 0/7 Quelldateien über 60 KB

Verwendete Eingangsdaten

primary_language	TypeScript
largest_source_bytes	3.600
source_files_sampled	7
oversized_source_files	0

Eckdaten

590GitHub-Sterne

7Mitwirkende

210Commits, letzte 12 Monate

1Tage seit letztem Push

100Releases

1Bus-Faktor

2offene Issues

npmPaket-Ökosysteme

Warnungen zur Datenerhebung

Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
deps.dev does not index npm:isomorphic-dompurify@3.19.0; advisories assessed against the repository dependency graph instead

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 16 ⇿

0Sterne

16Forks

63Releases

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

Major 2Minor 61Patch 0

Jeder Punkt umfasst 5 Tage.

OpenSSF Scorecard 4.7 / 10

4.7Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-22 10:35 UTC

10	Binary-Artifacts	no binaries found in the repo
0	Branch-Protection	branch protection not enabled on development/release branches
9	CI-Tests	19 out of 21 merged PRs checked by a CI test -- score normalized to 9
0	CII-Best-Practices	no effort to earn an OpenSSF best practices badge detected
0	Code-Review	Found 0/9 approved changesets -- score normalized to 0
3	Contributors	project has 1 contributing companies or organizations -- score normalized to 3
10	Dangerous-Workflow	no dangerous workflow patterns detected
10	Dependency-Update-Tool	update tool detected
0	Fuzzing	project is not fuzzed
10	License	license file detected
10	Maintained	30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
k. A.	Packaging	packaging workflow not detected
0	Pinned-Dependencies	dependency not pinned by hash detected -- score normalized to 0
0	SAST	SAST tool is not run on all commits -- score normalized to 0
0	Security-Policy	security policy file not detected
k. A.	Signed-Releases	no releases found
0	Token-Permissions	detected GitHub workflow tokens with excessive permissions
7	Vulnerabilities	3 existing vulnerabilities detected

Direkte Abhängigkeiten 2

Registry	Paket	Versionsvorgabe	Manifest
npm	dompurify	`^3.4.12`	package.json
npm	jsdom	`^29.1.1`	package.json

Alle Abhängigkeiten 237

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 2 direkte und 235 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

Registry	Paket	Version	Beziehung
npm	dompurify	`3.4.12`	direkt
npm	jsdom	`29.1.1`	direkt
npm	@asamuzakjp/css-color	`5.1.11`	indirekt
npm	@asamuzakjp/dom-selector	`7.1.1`	indirekt
npm	@asamuzakjp/generational-cache	`1.0.1`	indirekt
npm	@asamuzakjp/nwsapi	`2.3.9`	indirekt
npm	@biomejs/biome	`2.5.4`	indirekt
npm	@biomejs/cli-darwin-arm64	`2.5.4`	indirekt
npm	@biomejs/cli-darwin-x64	`2.5.4`	indirekt
npm	@biomejs/cli-linux-arm64	`2.5.4`	indirekt
npm	@biomejs/cli-linux-arm64-musl	`2.5.4`	indirekt
npm	@biomejs/cli-linux-x64	`2.5.4`	indirekt
npm	@biomejs/cli-linux-x64-musl	`2.5.4`	indirekt
npm	@biomejs/cli-win32-arm64	`2.5.4`	indirekt
npm	@biomejs/cli-win32-x64	`2.5.4`	indirekt
npm	@bramus/specificity	`2.4.2`	indirekt
npm	@csstools/color-helpers	`6.1.0`	indirekt
npm	@csstools/css-calc	`3.2.1`	indirekt
npm	@csstools/css-color-parser	`4.1.9`	indirekt
npm	@csstools/css-parser-algorithms	`4.0.0`	indirekt
npm	@csstools/css-syntax-patches-for-csstree	`1.1.6`	indirekt
npm	@csstools/css-tokenizer	`4.0.0`	indirekt
npm	@emnapi/core	`1.10.0`	indirekt
npm	@emnapi/runtime	`1.10.0`	indirekt
npm	@emnapi/wasi-threads	`1.2.1`	indirekt
npm	@esbuild/aix-ppc64	`0.27.7`	indirekt
npm	@esbuild/android-arm	`0.27.7`	indirekt
npm	@esbuild/android-arm64	`0.27.7`	indirekt
npm	@esbuild/android-x64	`0.27.7`	indirekt
npm	@esbuild/darwin-arm64	`0.27.7`	indirekt
npm	@esbuild/darwin-x64	`0.27.7`	indirekt
npm	@esbuild/freebsd-arm64	`0.27.7`	indirekt
npm	@esbuild/freebsd-x64	`0.27.7`	indirekt
npm	@esbuild/linux-arm	`0.27.7`	indirekt
npm	@esbuild/linux-arm64	`0.27.7`	indirekt
npm	@esbuild/linux-ia32	`0.27.7`	indirekt
npm	@esbuild/linux-loong64	`0.27.7`	indirekt
npm	@esbuild/linux-mips64el	`0.27.7`	indirekt
npm	@esbuild/linux-ppc64	`0.27.7`	indirekt
npm	@esbuild/linux-riscv64	`0.27.7`	indirekt
npm	@esbuild/linux-s390x	`0.27.7`	indirekt
npm	@esbuild/linux-x64	`0.27.7`	indirekt
npm	@esbuild/netbsd-arm64	`0.27.7`	indirekt
npm	@esbuild/netbsd-x64	`0.27.7`	indirekt
npm	@esbuild/openbsd-arm64	`0.27.7`	indirekt
npm	@esbuild/openbsd-x64	`0.27.7`	indirekt
npm	@esbuild/openharmony-arm64	`0.27.7`	indirekt
npm	@esbuild/sunos-x64	`0.27.7`	indirekt
npm	@esbuild/win32-arm64	`0.27.7`	indirekt
npm	@esbuild/win32-ia32	`0.27.7`	indirekt
npm	@esbuild/win32-x64	`0.27.7`	indirekt
npm	@exodus/bytes	`1.15.1`	indirekt
npm	@jridgewell/gen-mapping	`0.3.13`	indirekt
npm	@jridgewell/resolve-uri	`3.1.2`	indirekt
npm	@jridgewell/sourcemap-codec	`1.5.5`	indirekt
npm	@jridgewell/trace-mapping	`0.3.31`	indirekt
npm	@napi-rs/wasm-runtime	`1.1.6`	indirekt
npm	@oxc-project/types	`0.130.0`	indirekt
npm	@rolldown/binding-android-arm64	`1.0.1`	indirekt
npm	@rolldown/binding-darwin-arm64	`1.0.1`	indirekt
npm	@rolldown/binding-darwin-x64	`1.0.1`	indirekt
npm	@rolldown/binding-freebsd-x64	`1.0.1`	indirekt
npm	@rolldown/binding-linux-arm-gnueabihf	`1.0.1`	indirekt
npm	@rolldown/binding-linux-arm64-gnu	`1.0.1`	indirekt
npm	@rolldown/binding-linux-arm64-musl	`1.0.1`	indirekt
npm	@rolldown/binding-linux-ppc64-gnu	`1.0.1`	indirekt
npm	@rolldown/binding-linux-s390x-gnu	`1.0.1`	indirekt
npm	@rolldown/binding-linux-x64-gnu	`1.0.1`	indirekt
npm	@rolldown/binding-linux-x64-musl	`1.0.1`	indirekt
npm	@rolldown/binding-openharmony-arm64	`1.0.1`	indirekt
npm	@rolldown/binding-wasm32-wasi	`1.0.1`	indirekt
npm	@rolldown/binding-win32-arm64-msvc	`1.0.1`	indirekt
npm	@rolldown/binding-win32-x64-msvc	`1.0.1`	indirekt
npm	@rolldown/pluginutils	`1.0.1`	indirekt
npm	@rollup/rollup-android-arm-eabi	`4.62.2`	indirekt
npm	@rollup/rollup-android-arm64	`4.62.2`	indirekt
npm	@rollup/rollup-darwin-arm64	`4.62.2`	indirekt
npm	@rollup/rollup-darwin-x64	`4.62.2`	indirekt
npm	@rollup/rollup-freebsd-arm64	`4.62.2`	indirekt
npm	@rollup/rollup-freebsd-x64	`4.62.2`	indirekt
npm	@rollup/rollup-linux-arm-gnueabihf	`4.62.2`	indirekt
npm	@rollup/rollup-linux-arm-musleabihf	`4.62.2`	indirekt
npm	@rollup/rollup-linux-arm64-gnu	`4.62.2`	indirekt
npm	@rollup/rollup-linux-arm64-musl	`4.62.2`	indirekt
npm	@rollup/rollup-linux-loong64-gnu	`4.62.2`	indirekt
npm	@rollup/rollup-linux-loong64-musl	`4.62.2`	indirekt
npm	@rollup/rollup-linux-ppc64-gnu	`4.62.2`	indirekt
npm	@rollup/rollup-linux-ppc64-musl	`4.62.2`	indirekt
npm	@rollup/rollup-linux-riscv64-gnu	`4.62.2`	indirekt
npm	@rollup/rollup-linux-riscv64-musl	`4.62.2`	indirekt
npm	@rollup/rollup-linux-s390x-gnu	`4.62.2`	indirekt
npm	@rollup/rollup-linux-x64-gnu	`4.62.2`	indirekt
npm	@rollup/rollup-linux-x64-musl	`4.62.2`	indirekt
npm	@rollup/rollup-openbsd-x64	`4.62.2`	indirekt
npm	@rollup/rollup-openharmony-arm64	`4.62.2`	indirekt
npm	@rollup/rollup-win32-arm64-msvc	`4.62.2`	indirekt
npm	@rollup/rollup-win32-ia32-msvc	`4.62.2`	indirekt
npm	@rollup/rollup-win32-x64-gnu	`4.62.2`	indirekt
npm	@rollup/rollup-win32-x64-msvc	`4.62.2`	indirekt
npm	@standard-schema/spec	`1.1.0`	indirekt
npm	@tybys/wasm-util	`0.10.3`	indirekt
npm	@types/chai	`5.2.3`	indirekt
npm	@types/deep-eql	`4.0.2`	indirekt
npm	@types/estree	`1.0.9`	indirekt
npm	@types/jsdom	`28.0.3`	indirekt
npm	@types/node	`26.1.1`	indirekt
npm	@types/tough-cookie	`4.0.5`	indirekt
npm	@types/trusted-types	`2.0.7`	indirekt
npm	@vitest/expect	`4.1.10`	indirekt
npm	@vitest/mocker	`4.1.10`	indirekt
npm	@vitest/pretty-format	`4.1.10`	indirekt
npm	@vitest/runner	`4.1.10`	indirekt
npm	@vitest/snapshot	`4.1.10`	indirekt
npm	@vitest/spy	`4.1.10`	indirekt
npm	@vitest/utils	`4.1.10`	indirekt
npm	acorn	`8.17.0`	indirekt
npm	any-promise	`1.3.0`	indirekt
npm	assertion-error	`2.0.1`	indirekt
npm	balanced-match	`4.0.4`	indirekt
npm	bidi-js	`1.0.3`	indirekt
npm	brace-expansion	`5.0.7`	indirekt
npm	bundle-require	`5.1.0`	indirekt
npm	cac	`6.7.14`	indirekt
npm	chai	`6.2.2`	indirekt
npm	chokidar	`4.0.3`	indirekt
npm	commander	`4.1.1`	indirekt
npm	confbox	`0.1.8`	indirekt
npm	consola	`3.4.2`	indirekt
npm	convert-source-map	`2.0.0`	indirekt
npm	css-tree	`3.2.1`	indirekt
npm	data-urls	`7.0.0`	indirekt
npm	debug	`4.4.3`	indirekt
npm	decimal.js	`10.6.0`	indirekt
npm	detect-libc	`2.1.2`	indirekt
npm	entities	`8.0.0`	indirekt
npm	es-module-lexer	`2.3.1`	indirekt
npm	esbuild	`0.27.7`	indirekt
npm	estree-walker	`3.0.3`	indirekt
npm	expect-type	`1.4.0`	indirekt
npm	fdir	`6.5.0`	indirekt
npm	fix-dts-default-cjs-exports	`1.0.1`	indirekt
npm	fsevents	`2.3.3`	indirekt
npm	glob	`13.0.6`	indirekt
npm	html-encoding-sniffer	`6.0.0`	indirekt
npm	is-potential-custom-element-name	`1.0.1`	indirekt
npm	joycon	`3.1.1`	indirekt
npm	lefthook	`2.1.10`	indirekt
npm	lefthook-darwin-arm64	`2.1.10`	indirekt
npm	lefthook-darwin-x64	`2.1.10`	indirekt
npm	lefthook-freebsd-arm64	`2.1.10`	indirekt
npm	lefthook-freebsd-x64	`2.1.10`	indirekt
npm	lefthook-linux-arm64	`2.1.10`	indirekt
npm	lefthook-linux-x64	`2.1.10`	indirekt
npm	lefthook-openbsd-arm64	`2.1.10`	indirekt
npm	lefthook-openbsd-x64	`2.1.10`	indirekt
npm	lefthook-windows-arm64	`2.1.10`	indirekt
npm	lefthook-windows-x64	`2.1.10`	indirekt
npm	lightningcss	`1.32.0`	indirekt
npm	lightningcss-android-arm64	`1.32.0`	indirekt
npm	lightningcss-darwin-arm64	`1.32.0`	indirekt
npm	lightningcss-darwin-x64	`1.32.0`	indirekt
npm	lightningcss-freebsd-x64	`1.32.0`	indirekt
npm	lightningcss-linux-arm-gnueabihf	`1.32.0`	indirekt
npm	lightningcss-linux-arm64-gnu	`1.32.0`	indirekt
npm	lightningcss-linux-arm64-musl	`1.32.0`	indirekt
npm	lightningcss-linux-x64-gnu	`1.32.0`	indirekt
npm	lightningcss-linux-x64-musl	`1.32.0`	indirekt
npm	lightningcss-win32-arm64-msvc	`1.32.0`	indirekt
npm	lightningcss-win32-x64-msvc	`1.32.0`	indirekt
npm	lilconfig	`3.1.3`	indirekt
npm	lines-and-columns	`1.2.4`	indirekt
npm	load-tsconfig	`0.2.5`	indirekt
npm	lru-cache	`11.5.2`	indirekt
npm	magic-string	`0.30.21`	indirekt
npm	mdn-data	`2.27.1`	indirekt
npm	minimatch	`10.2.5`	indirekt
npm	minipass	`7.1.3`	indirekt
npm	mlly	`1.8.2`	indirekt
npm	ms	`2.1.3`	indirekt
npm	mz	`2.7.0`	indirekt
npm	nanoid	`3.3.15`	indirekt
npm	object-assign	`4.1.1`	indirekt
npm	obug	`2.1.3`	indirekt
npm	package-json-from-dist	`1.0.1`	indirekt
npm	parse5	`8.0.1`	indirekt
npm	path-scurry	`2.0.2`	indirekt
npm	pathe	`2.0.3`	indirekt
npm	picocolors	`1.1.1`	indirekt
npm	picomatch	`4.0.5`	indirekt
npm	pirates	`4.0.7`	indirekt
npm	pkg-types	`1.3.1`	indirekt
npm	postcss	`8.5.16`	indirekt
npm	postcss-load-config	`6.0.1`	indirekt
npm	punycode	`2.3.1`	indirekt
npm	readdirp	`4.1.2`	indirekt
npm	require-from-string	`2.0.2`	indirekt
npm	resolve-from	`5.0.0`	indirekt
npm	rimraf	`6.1.3`	indirekt
npm	rolldown	`1.0.1`	indirekt
npm	rollup	`4.62.2`	indirekt
npm	saxes	`6.0.0`	indirekt
npm	siginfo	`2.0.0`	indirekt
npm	source-map	`0.7.6`	indirekt
npm	source-map-js	`1.2.1`	indirekt
npm	stackback	`0.0.2`	indirekt
npm	std-env	`4.2.0`	indirekt
npm	sucrase	`3.35.1`	indirekt
npm	symbol-tree	`3.2.4`	indirekt
npm	thenify	`3.3.1`	indirekt
npm	thenify-all	`1.6.0`	indirekt
npm	tinybench	`2.9.0`	indirekt
npm	tinyexec	`0.3.2`	indirekt
npm	tinyexec	`1.2.4`	indirekt
npm	tinyglobby	`0.2.17`	indirekt
npm	tinyrainbow	`3.1.0`	indirekt
npm	tldts	`7.4.9`	indirekt
npm	tldts-core	`7.4.9`	indirekt
npm	tough-cookie	`6.0.2`	indirekt
npm	tr46	`6.0.0`	indirekt
npm	tree-kill	`1.2.2`	indirekt
npm	ts-interface-checker	`0.1.13`	indirekt
npm	tslib	`2.8.1`	indirekt
npm	tsup	`8.5.1`	indirekt
npm	typescript	`6.0.3`	indirekt
npm	ufo	`1.6.4`	indirekt
npm	undici	`7.28.0`	indirekt
npm	undici-types	`7.28.0`	indirekt
npm	undici-types	`8.3.0`	indirekt
npm	vite	`8.0.13`	indirekt
npm	vitest	`4.1.10`	indirekt
npm	w3c-xmlserializer	`5.0.0`	indirekt
npm	webidl-conversions	`8.0.1`	indirekt
npm	whatwg-mimetype	`5.0.0`	indirekt
npm	whatwg-url	`16.0.1`	indirekt
npm	why-is-node-running	`2.3.0`	indirekt
npm	xml-name-validator	`5.0.0`	indirekt
npm	xmlchars	`2.2.0`	indirekt

Abhängigkeits-Advisories 2

Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 237 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 2 tragen bekannte Advisories, davon 0 direkte.

Paket	Version	Beziehung	Schweregrad	Advisories	Behoben in
vite	`8.0.13`	indirekt	hoch	2	`8.0.16`
esbuild	`0.27.7`	indirekt	niedrig	1	`0.28.1`

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar

{
  "data": {
    "repo": {
      "topics": [
        "dompurify",
        "xss-filter",
        "xss",
        "isomorphic",
        "wrapper",
        "universal",
        "ssr",
        "html-escape",
        "security",
        "sanitize",
        "sanitize-html",
        "sanitizer",
        "isomorphic-dompurify"
      ],
      "is_fork": false,
      "size_kb": 2197,
      "has_wiki": true,
      "homepage": "https://www.npmjs.com/package/isomorphic-dompurify",
      "languages": {
        "TypeScript": 11506
      },
      "pushed_at": "2026-07-20T22:45:00Z",
      "created_at": "2020-03-17T16:09:17Z",
      "owner_type": "User",
      "updated_at": "2026-07-18T00:07:58Z",
      "description": "Use DOMPurify on server and client in the same way",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "master",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://komelin.com",
      "name": "Konstantin Komelin",
      "type": "User",
      "login": "kkomelin",
      "company": "@kometolabs",
      "location": "GMT+2",
      "followers": 102,
      "avatar_url": "https://avatars.githubusercontent.com/u/755066?v=4",
      "created_at": "2011-04-27T16:26:32Z",
      "is_verified": null,
      "public_repos": 81,
      "account_age_days": 5564
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "3.19.0",
          "kind": "minor",
          "published_at": "2026-07-17T11:04:01Z"
        },
        {
          "tag": "3.18.0",
          "kind": "minor",
          "published_at": "2026-06-19T09:07:13Z"
        },
        {
          "tag": "3.17.0",
          "kind": "minor",
          "published_at": "2026-06-13T16:10:22Z"
        },
        {
          "tag": "3.16.0",
          "kind": "minor",
          "published_at": "2026-06-05T12:39:19Z"
        },
        {
          "tag": "3.15.0",
          "kind": "minor",
          "published_at": "2026-05-28T15:06:47Z"
        },
        {
          "tag": "3.14.0",
          "kind": "minor",
          "published_at": "2026-05-19T09:16:51Z"
        },
        {
          "tag": "3.13.0",
          "kind": "minor",
          "published_at": "2026-05-14T11:53:39Z"
        },
        {
          "tag": "3.12.0",
          "kind": "minor",
          "published_at": "2026-05-02T04:53:55Z"
        },
        {
          "tag": "3.11.0",
          "kind": "minor",
          "published_at": "2026-04-29T14:16:35Z"
        },
        {
          "tag": "3.10.0",
          "kind": "minor",
          "published_at": "2026-04-22T19:16:56Z"
        },
        {
          "tag": "3.9.0",
          "kind": "minor",
          "published_at": "2026-04-15T10:12:20Z"
        },
        {
          "tag": "3.8.0",
          "kind": "minor",
          "published_at": "2026-04-08T18:51:17Z"
        },
        {
          "tag": "3.7.1",
          "kind": "patch",
          "published_at": "2026-03-24T10:04:13Z"
        },
        {
          "tag": "3.7.0",
          "kind": "minor",
          "published_at": "2026-03-24T06:38:23Z"
        },
        {
          "tag": "3.6.0",
          "kind": "minor",
          "published_at": "2026-03-21T13:27:18Z"
        },
        {
          "tag": "3.5.1",
          "kind": "patch",
          "published_at": "2026-03-17T22:59:47Z"
        },
        {
          "tag": "3.5.0",
          "kind": "minor",
          "published_at": "2026-03-17T19:34:59Z"
        },
        {
          "tag": "3.4.0",
          "kind": "minor",
          "published_at": "2026-03-17T09:34:43Z"
        },
        {
          "tag": "3.3.0",
          "kind": "minor",
          "published_at": "2026-03-12T10:07:33Z"
        },
        {
          "tag": "3.2.0",
          "kind": "minor",
          "published_at": "2026-03-12T10:00:10Z"
        },
        {
          "tag": "3.1.0",
          "kind": "minor",
          "published_at": "2026-03-09T14:53:21Z"
        },
        {
          "tag": "3.0.0",
          "kind": "major",
          "published_at": "2026-02-21T11:40:41Z"
        },
        {
          "tag": "v3.0.0-rc.3",
          "kind": "prerelease",
          "published_at": "2026-02-17T10:04:18Z"
        },
        {
          "tag": "v3.0.0-rc.2",
          "kind": "prerelease",
          "published_at": "2026-02-07T13:32:00Z"
        },
        {
          "tag": "v3.0.0-rc.1",
          "kind": "prerelease",
          "published_at": "2026-02-07T11:56:45Z"
        },
        {
          "tag": "2.36.0",
          "kind": "minor",
          "published_at": "2026-02-07T09:42:40Z"
        },
        {
          "tag": "2.35.0",
          "kind": "minor",
          "published_at": "2025-12-27T10:15:36Z"
        },
        {
          "tag": "2.34.0",
          "kind": "minor",
          "published_at": "2025-12-09T01:27:41Z"
        },
        {
          "tag": "2.33.0",
          "kind": "minor",
          "published_at": "2025-11-22T13:30:05Z"
        },
        {
          "tag": "2.32.0",
          "kind": "minor",
          "published_at": "2025-11-13T12:35:20Z"
        },
        {
          "tag": "2.31.0",
          "kind": "minor",
          "published_at": "2025-11-02T13:58:43Z"
        },
        {
          "tag": "2.30.1",
          "kind": "patch",
          "published_at": "2025-10-22T04:19:16Z"
        },
        {
          "tag": "2.30.0",
          "kind": "minor",
          "published_at": "2025-10-21T10:31:43Z"
        },
        {
          "tag": "2.29.0",
          "kind": "minor",
          "published_at": "2025-10-14T09:41:19Z"
        },
        {
          "tag": "2.28.0",
          "kind": "minor",
          "published_at": "2025-09-18T12:15:31Z"
        },
        {
          "tag": "2.27.0",
          "kind": "minor",
          "published_at": "2025-09-16T10:29:56Z"
        },
        {
          "tag": "2.26.0",
          "kind": "minor",
          "published_at": "2025-07-07T09:12:42Z"
        },
        {
          "tag": "2.25.0",
          "kind": "minor",
          "published_at": "2025-05-20T03:12:03Z"
        },
        {
          "tag": "2.24.0",
          "kind": "minor",
          "published_at": "2025-04-22T08:51:09Z"
        },
        {
          "tag": "2.23.0",
          "kind": "minor",
          "published_at": "2025-04-04T17:08:58Z"
        },
        {
          "tag": "2.22.0",
          "kind": "minor",
          "published_at": "2025-02-19T21:58:08Z"
        },
        {
          "tag": "2.21.0",
          "kind": "minor",
          "published_at": "2025-02-02T07:30:08Z"
        },
        {
          "tag": "v2.20.0",
          "kind": "minor",
          "published_at": "2025-01-10T08:41:09Z"
        },
        {
          "tag": "v2.19.0",
          "kind": "minor",
          "published_at": "2024-12-10T11:26:17Z"
        },
        {
          "tag": "v2.18.0",
          "kind": "minor",
          "published_at": "2024-11-30T20:07:57Z"
        },
        {
          "tag": "v2.17.0",
          "kind": "minor",
          "published_at": "2024-11-24T06:53:29Z"
        },
        {
          "tag": "v2.16.0",
          "kind": "minor",
          "published_at": "2024-09-27T18:35:00Z"
        },
        {
          "tag": "v2.15.0",
          "kind": "minor",
          "published_at": "2024-08-27T11:44:56Z"
        },
        {
          "tag": "v2.14.0",
          "kind": "minor",
          "published_at": "2024-07-25T05:10:09Z"
        },
        {
          "tag": "v2.13.0",
          "kind": "minor",
          "published_at": "2024-07-06T13:51:43Z"
        },
        {
          "tag": "v2.12.0",
          "kind": "minor",
          "published_at": "2024-06-05T05:38:55Z"
        },
        {
          "tag": "v2.11.0",
          "kind": "minor",
          "published_at": "2024-05-21T15:42:56Z"
        },
        {
          "tag": "v2.10.0",
          "kind": "minor",
          "published_at": "2024-05-14T03:01:18Z"
        },
        {
          "tag": "v2.9.0",
          "kind": "minor",
          "published_at": "2024-04-30T09:07:51Z"
        },
        {
          "tag": "v2.8.0",
          "kind": "minor",
          "published_at": "2024-04-28T08:12:18Z"
        },
        {
          "tag": "v2.7.0",
          "kind": "minor",
          "published_at": "2024-04-09T07:08:00Z"
        },
        {
          "tag": "v2.6.0",
          "kind": "minor",
          "published_at": "2024-03-22T08:09:36Z"
        },
        {
          "tag": "v2.5.0",
          "kind": "minor",
          "published_at": "2024-03-20T01:31:13Z"
        },
        {
          "tag": "v2.4.0",
          "kind": "minor",
          "published_at": "2024-02-21T03:07:47Z"
        },
        {
          "tag": "v2.3.0",
          "kind": "minor",
          "published_at": "2024-01-23T07:59:28Z"
        },
        {
          "tag": "v2.2.0",
          "kind": "minor",
          "published_at": "2024-01-06T10:26:43Z"
        },
        {
          "tag": "v2.1.0",
          "kind": "minor",
          "published_at": "2024-01-05T04:17:59Z"
        },
        {
          "tag": "v2.0.0",
          "kind": "major",
          "published_at": "2023-12-23T07:28:19Z"
        },
        {
          "tag": "v1.13.0",
          "kind": "minor",
          "published_at": "2023-12-20T01:37:05Z"
        },
        {
          "tag": "v1.12.0",
          "kind": "minor",
          "published_at": "2023-12-12T01:19:21Z"
        },
        {
          "tag": "v1.11.0",
          "kind": "minor",
          "published_at": "2023-12-01T05:42:37Z"
        },
        {
          "tag": "v1.10.0",
          "kind": "minor",
          "published_at": "2023-11-28T04:58:51Z"
        },
        {
          "tag": "v1.9.0",
          "kind": "minor",
          "published_at": "2023-09-29T02:20:55Z"
        },
        {
          "tag": "v1.8.0",
          "kind": "minor",
          "published_at": "2023-07-12T03:47:48Z"
        },
        {
          "tag": "v1.7.0",
          "kind": "minor",
          "published_at": "2023-06-30T00:32:53Z"
        },
        {
          "tag": "v1.6.0",
          "kind": "minor",
          "published_at": "2023-05-31T01:42:59Z"
        },
        {
          "tag": "v1.5.0",
          "kind": "minor",
          "published_at": "2023-05-11T02:06:14Z"
        },
        {
          "tag": "v1.4.0",
          "kind": "minor",
          "published_at": "2023-05-05T03:49:13Z"
        },
        {
          "tag": "v1.3.0",
          "kind": "minor",
          "published_at": "2023-04-16T08:07:30Z"
        },
        {
          "tag": "v1.2.0",
          "kind": "minor",
          "published_at": "2023-03-14T10:42:34Z"
        },
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2023-03-07T17:09:29Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2023-02-14T08:00:01Z"
        },
        {
          "tag": "v0.27.0",
          "kind": "minor",
          "published_at": "2023-02-11T10:32:03Z"
        },
        {
          "tag": "v0.26.0",
          "kind": "minor",
          "published_at": "2023-01-08T07:52:43Z"
        },
        {
          "tag": "v0.25.0",
          "kind": "minor",
          "published_at": "2023-01-06T10:36:30Z"
        },
        {
          "tag": "v0.24.0",
          "kind": "minor",
          "published_at": "2022-11-11T06:16:33Z"
        },
        {
          "tag": "v0.23.0",
          "kind": "minor",
          "published_at": "2022-10-06T05:23:55Z"
        },
        {
          "tag": "v0.22.0",
          "kind": "minor",
          "published_at": "2022-08-25T05:02:54Z"
        },
        {
          "tag": "v0.21.0",
          "kind": "minor",
          "published_at": "2022-08-24T05:57:46Z"
        },
        {
          "tag": "v0.20.0",
          "kind": "minor",
          "published_at": "2022-06-25T10:44:35Z"
        },
        {
          "tag": "v0.19.0",
          "kind": "minor",
          "published_at": "2022-05-16T18:30:49Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2022-01-27T13:06:27Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2021-12-07T19:11:05Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2021-10-26T04:57:22Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2021-07-09T08:47:52Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2021-06-06T14:50:32Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2021-04-09T03:42:18Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2021-01-28T07:56:15Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2021-01-03T16:31:50Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2020-12-09T07:53:57Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2020-11-06T13:21:15Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2020-10-24T16:03:00Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2020-09-30T06:26:26Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2020-09-01T06:46:01Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2020-07-16T10:11:21Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "64d2faefafc77a480fb7cc4f46330cb8d628ce78",
          "body": "- bump dompurify 3.4.11 -> 3.4.12\n- bump @biomejs/biome 2.5.0 -> 2.5.4 and migrate deprecated linter `recommended` to `preset`\n- bump vitest 4.1.9 -> 4.1.10\n- bump pnpm 11.11.0 -> 11.13.1\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): 3.19.0",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-07-17T10:57:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9513bbedfd5da00b5d54c649460d2ce6e8a1159d",
          "body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.11 to 3.4.12.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.11...3.4.12)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n  dependency-version: 3.4.12\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump dompurify from 3.4.11 to 3.4.12",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T10:21:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2cc00b9830f8eee5d706d0adde758c2f45386324",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.5.3 to 2.5.4.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com/b\n[…]\n dependency-name: \"@biomejs/biome\"\n  dependency-version: 2.5.4\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "bump @biomejs/biome from 2.5.3 to 2.5.4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-17T10:19:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9fd5480bd160681b22e8f24e73caacffeb673f8f",
          "body": "TypeScript 7 (the native compiler) drops the legacy `ts.sys` JS API that\ntsup's bundled rollup-plugin-dts relies on for .d.ts generation, so\n`pnpm build` crashed with \"Cannot read properties of undefined (reading\n'useCaseSensitiveFileNames')\". The latest rollup-plugin-dts still caps\ntypescript at ^6.0, so revert the dependabot bump (7.0.2 -> 6.0.3) and\ntell dependabot to skip typescript 7.x until the tooling catches up.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: pin typescript to v6 to restore d.ts build",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-07-11T22:39:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "acdf84fbc8c26c0c5527d1523c6145d79ff61f58",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump pnpm from 11.6.0 to 11.11.0",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-07-11T22:34:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a80de547fd324ed22ed9e0a30f2211d899aed8ca",
          "body": "Bumps [lefthook](https://github.com/evilmartians/lefthook) from 2.1.9 to 2.1.10.\n- [Release notes](https://github.com/evilmartians/lefthook/releases)\n- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/evilmartians/lefthook/compare/v2.1.9..\n[…]\ncies:\n- dependency-name: lefthook\n  dependency-version: 2.1.10\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump lefthook from 2.1.9 to 2.1.10",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T18:11:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1f9f1a29c9282d4377fc8ca87eefb13a27533f43",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.5.2 to 2.5.3.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com/b\n[…]\n dependency-name: \"@biomejs/biome\"\n  dependency-version: 2.5.3\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @biomejs/biome from 2.5.2 to 2.5.3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T18:11:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7670b001c9eb8c112a1789ad65db3a8ad3fd9e09",
          "body": "Bumps [typescript](https://github.com/microsoft/TypeScript) from 6.0.3 to 7.0.2.\n- [Release notes](https://github.com/microsoft/TypeScript/releases)\n- [Commits](https://github.com/microsoft/TypeScript/commits)\n\n---\nupdated-dependencies:\n- dependency-name: typescript\n  dependency-version: 7.0.2\n  dependency-type: direct:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump typescript from 6.0.3 to 7.0.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T18:10:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bb83290d2e44c9d7b1e199514af48c3b6601ae8",
          "body": "Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.9 to 4.1.10.\n- [Release notes](https://github.com/vitest-dev/vitest/releases)\n- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)\n- [Commits](https://github.com/vitest-dev/vitest/commit\n[…]\nencies:\n- dependency-name: vitest\n  dependency-version: 4.1.10\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vitest from 4.1.9 to 4.1.10",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-08T07:52:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "95d8989abb7be2086ae25b33736b0b0e24a3cda8",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.5.1 to 2.5.2.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com/b\n[…]\n dependency-name: \"@biomejs/biome\"\n  dependency-version: 2.5.2\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @biomejs/biome from 2.5.1 to 2.5.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-03T16:56:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1d25f802d92f32a169b1ce4268785cff0c9a8a92",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.5.0 to 2.5.1.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com/b\n[…]\n dependency-name: \"@biomejs/biome\"\n  dependency-version: 2.5.1\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @biomejs/biome from 2.5.0 to 2.5.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-30T09:46:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3b1c6e02aa9272c86f8db34f945f7a2cd26a7daf",
          "body": "Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 6.0.8 to 6.0.9.\n- [Release notes](https://github.com/pnpm/action-setup/releases)\n- [Commits](https://github.com/pnpm/action-setup/compare/v6.0.8...v6.0.9)\n\n---\nupdated-dependencies:\n- dependency-name: pnpm/action-setup\n  dependency-version: 6.0.9\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump pnpm/action-setup from 6.0.8 to 6.0.9",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T06:31:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8436f371c30f4dd55856dc4a3957f577646868b",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/checkout from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T05:41:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1d5745c69d4c7dd2ec76dc7fa2ab3ccfdf3fc0ee",
          "body": "Bump version to 3.18.0, update dompurify to ^3.4.11 and vitest to ^4.1.9.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: release v3.18.0",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-06-19T09:04:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e1202c58378eba05129bbb888930774403909e3f",
          "body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.10 to 3.4.11.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.10...3.4.11)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n  dependency-version: 3.4.11\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump dompurify from 3.4.10 to 3.4.11",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-19T08:41:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab9cc6bc7592d505860681b70d17e83c19e2307a",
          "body": "Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.8 to 4.1.9.\n- [Release notes](https://github.com/vitest-dev/vitest/releases)\n- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)\n- [Commits](https://github.com/vitest-dev/vitest/commits\n[…]\ndencies:\n- dependency-name: vitest\n  dependency-version: 4.1.9\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vitest from 4.1.8 to 4.1.9",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-16T22:54:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "60491d6d618d16e8edfcacd2897022df7a2a50ed",
          "body": "Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 6 to 6.0.8.\n- [Release notes](https://github.com/pnpm/action-setup/releases)\n- [Commits](https://github.com/pnpm/action-setup/compare/v6...v6.0.8)\n\n---\nupdated-dependencies:\n- dependency-name: pnpm/action-setup\n  dependency-version: 6.0.8\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump pnpm/action-setup from 6 to 6.0.8",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-16T04:59:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b0f0dbbd4660c49afeeffcd6a242535abbcebff",
          "body": null,
          "is_bot": false,
          "headline": "chore: Updated dependencies.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-06-13T16:05:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e537bde79bab72e52182dd9b362dd95514417c7",
          "body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.8 to 3.4.9.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.8...3.4.9)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n  dependency-version: 3.4.9\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump dompurify from 3.4.8 to 3.4.9",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-12T11:11:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bee551b88e01e550c82ed79fc76e520e41e1b5e2",
          "body": "Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump version to 3.16.0 and update dependencies.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-06-05T12:34:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e03b0c031cdf7211fd85e7bf42da3f905dde5fff",
          "body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.7 to 3.4.8.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.7...3.4.8)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n  dependency-version: 3.4.8\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump dompurify from 3.4.7 to 3.4.8",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-05T09:04:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86abe8bfb892d4456359a10b78fd49166bd7fb71",
          "body": "Bumps [lefthook](https://github.com/evilmartians/lefthook) from 2.1.8 to 2.1.9.\n- [Release notes](https://github.com/evilmartians/lefthook/releases)\n- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/evilmartians/lefthook/compare/v2.1.8...\n[…]\nncies:\n- dependency-name: lefthook\n  dependency-version: 2.1.9\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump lefthook from 2.1.8 to 2.1.9",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-03T18:09:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "284831c10f8108ddfc681c1ad9a6612d257662a8",
          "body": "Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.7 to 4.1.8.\n- [Release notes](https://github.com/vitest-dev/vitest/releases)\n- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)\n- [Commits](https://github.com/vitest-dev/vitest/commits\n[…]\ndencies:\n- dependency-name: vitest\n  dependency-version: 4.1.8\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vitest from 4.1.7 to 4.1.8",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-03T18:09:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2542801ba67f57299ac68c5f15c13e00280e2fd8",
          "body": "- dompurify 3.4.5 -> 3.4.7\n- @biomejs/biome 2.4.15 -> 2.4.16\n- vitest 4.1.6 -> 4.1.7\n- packageManager pnpm 11.1.3 -> 11.4.0\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump version to 3.15.0 and update dependencies.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-05-28T15:02:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "82bb1de6d87969245d8b95771ff0c1f1f4682751",
          "body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.5 to 3.4.6.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.5...3.4.6)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n  dependency-version: 3.4.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump dompurify from 3.4.5 to 3.4.6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-28T06:19:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "871d363c1044851390c67f5da0128a9447d6c583",
          "body": "Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.6 to 4.1.7.\n- [Release notes](https://github.com/vitest-dev/vitest/releases)\n- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/vitest)\n\n---\nupdated-dependencies:\n- dependency-name: vitest\n  dependency-version: 4.1.7\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vitest from 4.1.6 to 4.1.7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-28T06:18:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "518ae7de7953942eb18fd2fd6517ebda68d9a899",
          "body": "Bumps [lefthook](https://github.com/evilmartians/lefthook) from 2.1.6 to 2.1.8.\n- [Release notes](https://github.com/evilmartians/lefthook/releases)\n- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/evilmartians/lefthook/compare/v2.1.6...\n[…]\nncies:\n- dependency-name: lefthook\n  dependency-version: 2.1.8\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump lefthook from 2.1.6 to 2.1.8",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-21T06:13:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45a223bd9a23c27fb08ded5fc7f53b75361aa63b",
          "body": "CI failed on pnpm's 24h minimumReleaseAge policy after lefthook 2.1.7\nlanded via dependabot. Pin lefthook to bypass the freshly-published\nversion and add a matching 1-day cooldown to dependabot so future bumps\nrespect the same window.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Pin lefthook to 2.1.6 and add dependabot cooldown.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-05-19T09:58:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d6a1565f8d61afce38f90a05ec2234a77e310042",
          "body": null,
          "is_bot": false,
          "headline": "chore: Actualized pnpm-lock.yaml.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-05-19T09:49:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29ba76f5967fd589f76878d816aff7d42f36631f",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v6)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n  dependency-version: '6'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/checkout from 4 to 6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-19T09:45:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4815ec0db8109a361f54db280614ebf2f311415f",
          "body": "Bumps [lefthook](https://github.com/evilmartians/lefthook) from 2.1.6 to 2.1.7.\n- [Release notes](https://github.com/evilmartians/lefthook/releases)\n- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/evilmartians/lefthook/compare/v2.1.6...\n[…]\nncies:\n- dependency-name: lefthook\n  dependency-version: 2.1.7\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump lefthook from 2.1.6 to 2.1.7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-19T09:43:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6cf05bb94c9c28323846a3b88d3f66b658698715",
          "body": "Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4 to 6.\n- [Release notes](https://github.com/pnpm/action-setup/releases)\n- [Commits](https://github.com/pnpm/action-setup/compare/v4...v6)\n\n---\nupdated-dependencies:\n- dependency-name: pnpm/action-setup\n  dependency-version: '6'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump pnpm/action-setup from 4 to 6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-19T09:43:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8469425bcff0c983992c2cd9912864195dbe000",
          "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v4...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n  dependency-version: '6'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/setup-node from 4 to 6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-19T09:42:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b78e36ad4ae49da01f5e34bec93e5358e370797",
          "body": null,
          "is_bot": false,
          "headline": "chore: Added github-actions to dependabot tracking.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-05-19T09:37:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa11d1dfae3f19540b2c3ab6a728a6b9590049e2",
          "body": "Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump version to 3.14.0",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-05-19T09:10:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3706f30e088c11c3d433e035992dbd42b353eb58",
          "body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.3 to 3.4.5.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.3...3.4.5)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n  dependency-version: 3.4.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump dompurify from 3.4.3 to 3.4.5",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-19T08:44:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f1d8b27560983abf4ed60f845caf3b1938ba255",
          "body": "Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Added homepage URL to package.json.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-05-14T11:58:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0c05491ff71d115417e04262b3e39bbd73f99ce8",
          "body": null,
          "is_bot": false,
          "headline": "chore: Allowed esbuild and disallowed lefthook for ci.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-05-14T11:55:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1590874e7408f823c1a6a7aca1a78d5ca8018c7",
          "body": null,
          "is_bot": false,
          "headline": "chore: Updated deps and incremented project version.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-05-14T11:49:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8b2f23ee2e7165a65b406fb9e73deee8037adfe",
          "body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.2 to 3.4.3.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.2...3.4.3)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n  dependency-version: 3.4.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump dompurify from 3.4.2 to 3.4.3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-14T09:22:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64b1d7baa8eb41fe2a743dedd2aca5825ccb63e1",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.14 to 2.4.15.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com\n[…]\ndependency-name: \"@biomejs/biome\"\n  dependency-version: 2.4.15\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @biomejs/biome from 2.4.14 to 2.4.15",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-13T12:00:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "233ed4d733f0706804a5b40f193fd1e35e158223",
          "body": "Bumps [@types/jsdom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jsdom) from 28.0.1 to 28.0.3.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jsdom)\n\n---\nupdated-d\n[…]\n- dependency-name: \"@types/jsdom\"\n  dependency-version: 28.0.3\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @types/jsdom from 28.0.1 to 28.0.3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-13T12:00:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bf445249ee78e06ebf88b8f513fd911101a66840",
          "body": "Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.5 to 4.1.6.\n- [Release notes](https://github.com/vitest-dev/vitest/releases)\n- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/vitest)\n\n---\nupdated-dependencies:\n- dependency-name: vitest\n  dependency-version: 4.1.6\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vitest from 4.1.5 to 4.1.6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-13T09:40:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "499ed1a1be74c6fcec704f673742afa1878453e8",
          "body": null,
          "is_bot": false,
          "headline": "chore: Updated deps. Incremented project version.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-05-02T04:45:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e75b527e62e613df4619a61c886255eaa23bdc7",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.13 to 2.4.14.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com\n[…]\ndependency-name: \"@biomejs/biome\"\n  dependency-version: 2.4.14\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @biomejs/biome from 2.4.13 to 2.4.14",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-02T04:42:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "73465d14260d701499b97fa8dcc51c2d175a3289",
          "body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.1 to 3.4.2.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.1...3.4.2)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n  dependency-version: 3.4.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump dompurify from 3.4.1 to 3.4.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-01T03:28:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e0257c82759d781bbfb5cf32459de6d73d9d9644",
          "body": "Bumps [jsdom](https://github.com/jsdom/jsdom) from 29.1.0 to 29.1.1.\n- [Release notes](https://github.com/jsdom/jsdom/releases)\n- [Commits](https://github.com/jsdom/jsdom/compare/v29.1.0...v29.1.1)\n\n---\nupdated-dependencies:\n- dependency-name: jsdom\n  dependency-version: 29.1.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump jsdom from 29.1.0 to 29.1.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-01T03:27:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5694ecd11ba1103f5e5053232b3e828a39d578f5",
          "body": null,
          "is_bot": false,
          "headline": "chore: Updated deps.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-04-29T14:04:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a57303aa45e77a5f824fac309821231dfceec94",
          "body": "Re-export Config, DOMPurify, DocumentFragmentHook, ElementHook, HookName,\nNodeHook, RemovedAttribute, RemovedElement, UponSanitizeAttributeHook,\nUponSanitizeAttributeHookEvent, UponSanitizeElementHook,\nUponSanitizeElementHookEvent, and WindowLike from dompurify so consumers\ncan type addHook callbacks without redeclaring the signatures.\n\nCloses #427\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: export hook-related TypeScript types (#427)",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-04-29T14:02:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d1b4f6f7949cac1f51381affc51fe905d4c36e36",
          "body": "Bumps [jsdom](https://github.com/jsdom/jsdom) from 29.0.2 to 29.1.0.\n- [Release notes](https://github.com/jsdom/jsdom/releases)\n- [Commits](https://github.com/jsdom/jsdom/compare/v29.0.2...v29.1.0)\n\n---\nupdated-dependencies:\n- dependency-name: jsdom\n  dependency-version: 29.1.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump jsdom from 29.0.2 to 29.1.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-28T06:34:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b57c26dab1a8573a3941a0b4767036e7cf4f34bc",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.12 to 2.4.13.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com\n[…]\ndependency-name: \"@biomejs/biome\"\n  dependency-version: 2.4.13\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @biomejs/biome from 2.4.12 to 2.4.13",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-24T12:38:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8475e9e332aba2b84999a48af0bc4c03bd8b7637",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add npm weekly downloads badge to README",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-04-22T19:22:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f8acfc44e7504e719c03f566506c8888427a7333",
          "body": null,
          "is_bot": false,
          "headline": "chore: Updated deps and incremented project version.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-04-22T19:13:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb199e54997652a2704e4b4e207ee8b7b2f77e6d",
          "body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.0 to 3.4.1.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.0...3.4.1)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n  dependency-version: 3.4.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump dompurify from 3.4.0 to 3.4.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-22T07:38:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f950ad71e783d0c647d89a021ef7a156c1a2e84d",
          "body": "Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.4 to 4.1.5.\n- [Release notes](https://github.com/vitest-dev/vitest/releases)\n- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest)\n\n---\nupdated-dependencies:\n- dependency-name: vitest\n  dependency-version: 4.1.5\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vitest from 4.1.4 to 4.1.5",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-21T23:16:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2a5fc0e9ddbacfab644d80b7caca820a2281562",
          "body": "Bumps [typescript](https://github.com/microsoft/TypeScript) from 6.0.2 to 6.0.3.\n- [Release notes](https://github.com/microsoft/TypeScript/releases)\n- [Commits](https://github.com/microsoft/TypeScript/compare/v6.0.2...v6.0.3)\n\n---\nupdated-dependencies:\n- dependency-name: typescript\n  dependency-version: 6.0.3\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump typescript from 6.0.2 to 6.0.3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-18T07:25:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42fcdce93044691a8d1e35ac71e7fed19c24b96d",
          "body": "Bumps [lefthook](https://github.com/evilmartians/lefthook) from 2.1.5 to 2.1.6.\n- [Release notes](https://github.com/evilmartians/lefthook/releases)\n- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/evilmartians/lefthook/compare/v2.1.5...\n[…]\nncies:\n- dependency-name: lefthook\n  dependency-version: 2.1.6\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump lefthook from 2.1.5 to 2.1.6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-17T10:08:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8ca0afac1418d7af8943e49bbc1eabc2e65fa38f",
          "body": null,
          "is_bot": false,
          "headline": "chore: Incremented project version.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-04-15T10:01:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a544f3cd70b9f5cdf9c4d92837c18da81033e1d2",
          "body": null,
          "is_bot": false,
          "headline": "chore: Upated deps.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-04-15T10:00:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2daec399477285d3f99295c20267e1866e9217f",
          "body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.3 to 3.4.0.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.3.3...3.4.0)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n  dependency-version: 3.4.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump dompurify from 3.3.3 to 3.4.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-15T09:58:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d121b0222d55653e6d6d20a93fa5c8665f6a807",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.11 to 2.4.12.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com\n[…]\ndependency-name: \"@biomejs/biome\"\n  dependency-version: 2.4.12\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @biomejs/biome from 2.4.11 to 2.4.12",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-15T09:57:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5e361873ce97994b2e4fb0a144b4df35f1ad4ae6",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.10 to 2.4.11.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com\n[…]\ndependency-name: \"@biomejs/biome\"\n  dependency-version: 2.4.11\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @biomejs/biome from 2.4.10 to 2.4.11",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-10T05:01:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "06b4ce46205e801d9ce69a3edf98d4c7db49d5d0",
          "body": "Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.3 to 4.1.4.\n- [Release notes](https://github.com/vitest-dev/vitest/releases)\n- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/vitest)\n\n---\nupdated-dependencies:\n- dependency-name: vitest\n  dependency-version: 4.1.4\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vitest from 4.1.3 to 4.1.4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-10T05:00:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "40c0cede1886be71ef876c7499d36c8bcb07be1f",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): bump version to 3.8.0 and update dep ranges",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-04-08T18:43:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1493745ad1730d51bbcf2ea1c2c0414626cd7599",
          "body": "Bumps [jsdom](https://github.com/jsdom/jsdom) from 29.0.1 to 29.0.2.\n- [Release notes](https://github.com/jsdom/jsdom/releases)\n- [Commits](https://github.com/jsdom/jsdom/compare/v29.0.1...v29.0.2)\n\n---\nupdated-dependencies:\n- dependency-name: jsdom\n  dependency-version: 29.0.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump jsdom from 29.0.1 to 29.0.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-08T18:39:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "772dbc817bd5977d5a8394f8218e6ffc6c4ad0bc",
          "body": "Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.2 to 4.1.3.\n- [Release notes](https://github.com/vitest-dev/vitest/releases)\n- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.3/packages/vitest)\n\n---\nupdated-dependencies:\n- dependency-name: vitest\n  dependency-version: 4.1.3\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vitest from 4.1.2 to 4.1.3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-08T07:48:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c426c9eaae0f292d24a5ff4b98b0244e10b1f9f",
          "body": "Bumps [lefthook](https://github.com/evilmartians/lefthook) from 2.1.4 to 2.1.5.\n- [Release notes](https://github.com/evilmartians/lefthook/releases)\n- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/evilmartians/lefthook/compare/v2.1.4...\n[…]\nncies:\n- dependency-name: lefthook\n  dependency-version: 2.1.5\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump lefthook from 2.1.4 to 2.1.5",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-07T05:51:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9532ef7c33c71f909469c7cc08d60230c09f0476",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.9 to 2.4.10.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com/\n[…]\ndependency-name: \"@biomejs/biome\"\n  dependency-version: 2.4.10\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @biomejs/biome from 2.4.9 to 2.4.10",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-31T11:38:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eff4ba9e560dde52f1e5209dec33c97c8ef6c08b",
          "body": "Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.1 to 4.1.2.\n- [Release notes](https://github.com/vitest-dev/vitest/releases)\n- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/vitest)\n\n---\nupdated-dependencies:\n- dependency-name: vitest\n  dependency-version: 4.1.2\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vitest from 4.1.1 to 4.1.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-27T13:10:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62e619d821ac5cde578e8db0edeb57bb9a7623e9",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.8 to 2.4.9.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com/b\n[…]\n dependency-name: \"@biomejs/biome\"\n  dependency-version: 2.4.9\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @biomejs/biome from 2.4.8 to 2.4.9",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-26T07:31:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11315f468949fe9d991648af6def84153de60511",
          "body": null,
          "is_bot": false,
          "headline": "chore: Bumped project version.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-24T10:00:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97770c7ff5738628d6c70002efae4f906ebb5082",
          "body": "tsup runs config array entries in parallel. The `clean: true` on the\nindex entry could wipe `browser.d.ts`/`browser.d.mts` written by the\nbrowser entry, causing TS7016 in tsgo/TS6 (fixes #411).\n\nReplace tsup's `clean` option with a pre-build `rimraf dist` step to\nensure deterministic output.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: prevent race condition dropping browser type declarations",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-24T09:59:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8a06c606b8ed2fd1e89a358ab4a3e1c8c8412aa6",
          "body": null,
          "is_bot": false,
          "headline": "chore: Incremented project version.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-24T06:34:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51ebc9d7fec2c5a4fad6ea5b355cc050fe8cc517",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: silence baseUrl deprecation warning from tsup dts build in TS6",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-24T06:30:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b0fab7e32fb618c81f6d30ff6e6c50071bb2fef4",
          "body": null,
          "is_bot": false,
          "headline": "chore: Updated deps.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-24T06:26:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e86f895dcc58afb9455f38bb74b554b78a5891a",
          "body": "Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.2.\n- [Release notes](https://github.com/microsoft/TypeScript/releases)\n- [Commits](https://github.com/microsoft/TypeScript/compare/v5.9.3...v6.0.2)\n\n---\nupdated-dependencies:\n- dependency-name: typescript\n  dependency-version: 6.0.2\n  dependency-type: direct:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump typescript from 5.9.3 to 6.0.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-24T06:25:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0285239f5507a9b11ade6a0a9f4ea39fe752f8d",
          "body": "TypeScript 6 requires explicit type annotations when the inferred type\nreferences a non-portable path (TrustedHTML from @types/trusted-types).\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: add explicit type annotation for sanitize to satisfy TS6",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-24T06:20:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cb38b248e692e2a0cd113eadc90d74bbc2068654",
          "body": "Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.0 to 4.1.1.\n- [Release notes](https://github.com/vitest-dev/vitest/releases)\n- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.1/packages/vitest)\n\n---\nupdated-dependencies:\n- dependency-name: vitest\n  dependency-version: 4.1.1\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vitest from 4.1.0 to 4.1.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-24T06:14:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "009574a44b45833dec0b85c5b63dc800764b2955",
          "body": null,
          "is_bot": false,
          "headline": "chore: Updated deps. Incremented project version.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-21T13:22:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21b362d1eaab2542ea437c4e957e93ef52712a35",
          "body": "Bumps [jsdom](https://github.com/jsdom/jsdom) from 29.0.0 to 29.0.1.\n- [Release notes](https://github.com/jsdom/jsdom/releases)\n- [Commits](https://github.com/jsdom/jsdom/compare/v29.0.0...v29.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: jsdom\n  dependency-version: 29.0.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump jsdom from 29.0.0 to 29.0.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-21T09:47:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "149808d8bf938ac3eb924941a55e6db838873d40",
          "body": "Bumps [@types/jsdom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jsdom) from 28.0.0 to 28.0.1.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jsdom)\n\n---\nupdated-d\n[…]\n- dependency-name: \"@types/jsdom\"\n  dependency-version: 28.0.1\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @types/jsdom from 28.0.0 to 28.0.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-20T09:46:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0e869914cb24e0708852685834ad329b30a867db",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.7 to 2.4.8.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com/b\n[…]\n dependency-name: \"@biomejs/biome\"\n  dependency-version: 2.4.8\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @biomejs/biome from 2.4.7 to 2.4.8",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-19T09:06:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4d1e30b0da7b904cc3d6455a618c237970349016",
          "body": null,
          "is_bot": false,
          "headline": "3.5.1",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-17T22:56:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "349d0c3cb694cc67c18bd34e08ec721195f6d7e1",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: configure npm tag version prefix to omit 'v'",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-17T22:56:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "657da4e089b124401ca1db4ceea881043b9cc9e0",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: add prepublishOnly script to build before publishing",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-17T22:52:21Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e83dc358cb354cb549b56fb718b751e0c596cd28",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: document factory function usage in README",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-17T19:40:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bcf7d582107a751e850cf572ed941264c3a67f38",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump version to 3.5.0",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-17T19:31:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c02319b287e7fae33ec6682c93f419a3a37fcfa1",
          "body": "Mirrors the lint job pattern, running biome format only on staged\n*.{js,ts,mjs,mts} files instead of the whole project on every commit.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: scope format hook to staged files only",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-17T19:27:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "201d6b0a62a7e8dfd18dbd3bf05dc21f10ca2ec0",
          "body": "Adds support for `DOMPurify(window)` usage, matching the dompurify API.\nThe Proxy target is now a function with an `apply` trap, while the `get`\ntrap continues to delegate instance methods to the shared default purify.\n\nMoves the issue #405 regression test into a dedicated factory.test.ts.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: make default export callable as a factory function",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-17T19:26:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5223edd12e385c34c1642d11af704e9957e4ca6c",
          "body": "…qualNode (issue #405)\n\nBased on the minimal repro from https://github.com/kkomelin/isomorphic-dompurify/issues/405#issuecomment-4076465555\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: add regression test for RETURN_DOM+FORCE_BODY cross-context isE…",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-17T18:35:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7365ff70352cd668a0085360f494e5f65d529105",
          "body": "…ssue #405)\n\nCovers the case where a sanitized node (from isomorphic-dompurify's internal\nJSDOM) is compared via isEqualNode with a node from a separate JSDOM instance,\ne.g. a test framework's own JSDOM environment.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: add regression test for RETURN_DOM cross-context isEqualNode (i…",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-17T16:15:36Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2c0680c8175ab32a4ae4911f92dcea79901df3f7",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump version to 3.4.0",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-17T09:30:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2f107ae16dbfccb392a0e29d75dfc3475d6cdb01",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: run biome format as a pre-commit hook",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-17T09:26:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e28aa9042c7e46d5081a4a148ca0fd00b3666399",
          "body": "…t for jsdom 29\n\n- Bump engines.node minimum from ^22.12.0 to ^22.13.0\n- Add README compatibility row for >=3.4.0\n- Add biome format --write script\n- Remove time-degradation assertion that no longer holds with jsdom 29\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: update Node.js engine to >=22.13.0, add format script, fix tes…",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-17T09:25:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "99efd85b20a4052232a38098025fa57c62a9b3ad",
          "body": "Bumps [jsdom](https://github.com/jsdom/jsdom) from 28.1.0 to 29.0.0.\n- [Release notes](https://github.com/jsdom/jsdom/releases)\n- [Changelog](https://github.com/jsdom/jsdom/blob/v29.0.0/Changelog.md)\n- [Commits](https://github.com/jsdom/jsdom/compare/v28.1.0...v29.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: jsdom\n  dependency-version: 29.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump jsdom from 28.1.0 to 29.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-17T09:05:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bae0675120ffd45fc6cfa0ce0289dfde71b467a",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' of github.com:kkomelin/isomorphic-dompurify",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-14T12:11:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87520352a1e80a5293d8512cbfcdd6ebbff1ad15",
          "body": null,
          "is_bot": false,
          "headline": "docs: Minor improvement in readme.",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-14T12:10:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a696be8725a821808cac9562d49f2d04ae64317c",
          "body": "Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.6 to 2.4.7.\n- [Release notes](https://github.com/biomejs/biome/releases)\n- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)\n- [Commits](https://github.com/b\n[…]\n dependency-name: \"@biomejs/biome\"\n  dependency-version: 2.4.7\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump @biomejs/biome from 2.4.6 to 2.4.7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-14T12:03:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "54d0efc7a094045950da9cb78318e5ab5ed2f584",
          "body": "Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.0.18 to 4.1.0.\n- [Release notes](https://github.com/vitest-dev/vitest/releases)\n- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest)\n\n---\nupdated-dependencies:\n- dependency-name: vitest\n  dependency-version: 4.1.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vitest from 4.0.18 to 4.1.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-12T23:33:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6b6cfdbe95a9b7c0b51be746ed15996a95a04440",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Replace fury.io badge with shields.io",
          "author_name": "Konstantin Komelin",
          "author_login": "kkomelin",
          "committed_at": "2026-03-12T10:10:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        }
      ],
      "releases_count": 100,
      "commits_last_year": 210,
      "latest_release_at": "2026-07-17T11:04:01Z",
      "latest_release_tag": "3.19.0",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 41,
      "days_since_latest_release": 4,
      "mean_days_between_releases": 9.5
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "isomorphic-dompurify",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "security",
            "dompurify",
            "xss-filter",
            "xss",
            "isomorphic",
            "wrapper",
            "universal",
            "ssr",
            "html-escape",
            "sanitize",
            "sanitize-html",
            "sanitizer"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/isomorphic-dompurify",
          "is_deprecated": false,
          "latest_version": "3.19.0",
          "repository_url": "https://github.com/kkomelin/isomorphic-dompurify",
          "versions_count": 104,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 20785134,
          "first_published_at": "2020-03-19T08:58:21.050000Z",
          "latest_published_at": "2026-07-17T11:02:05.047000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 4
        }
      ]
    },
    "popularity": {
      "forks": 16,
      "stars": 590,
      "watchers": 3,
      "fork_history": {
        "days": [
          {
            "date": "2020-03-19",
            "count": 1
          },
          {
            "date": "2020-12-02",
            "count": 1
          },
          {
            "date": "2021-02-19",
            "count": 1
          },
          {
            "date": "2022-01-04",
            "count": 1
          },
          {
            "date": "2022-08-16",
            "count": 1
          },
          {
            "date": "2023-01-21",
            "count": 1
          },
          {
            "date": "2023-02-09",
            "count": 1
          },
          {
            "date": "2023-05-26",
            "count": 1
          },
          {
            "date": "2023-12-01",
            "count": 1
          },
          {
            "date": "2023-12-03",
            "count": 1
          },
          {
            "date": "2023-12-21",
            "count": 1
          },
          {
            "date": "2023-12-28",
            "count": 1
          },
          {
            "date": "2025-03-11",
            "count": 1
          },
          {
            "date": "2025-04-11",
            "count": 1
          },
          {
            "date": "2025-05-24",
            "count": 1
          },
          {
            "date": "2025-07-06",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 16,
        "total_forks": 16
      },
      "star_history": null,
      "open_issues_and_prs": 3
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 3600,
      "source_files_sampled": 7,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "vite",
            "direct": false,
            "version": "8.0.13",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-fx2h-pf6j-xcff",
              "GHSA-v6wh-96g9-6wx3"
            ],
            "fixed_version": "8.0.16",
            "advisory_count": 2,
            "oldest_advisory_days": 36
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.27.7",
            "severity": "low",
            "ecosystem": "npm",
            "cvss_score": 2.5,
            "advisory_ids": [
              "GHSA-g7r4-m6w7-qqqr"
            ],
            "fixed_version": "0.28.1",
            "advisory_count": 1,
            "oldest_advisory_days": 39
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 1,
          "high": 1
        },
        "advisory_count": 3,
        "affected_count": 2,
        "assessed_count": 237,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "dompurify",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.4.12"
        },
        {
          "name": "jsdom",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^29.1.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "dompurify",
            "direct": true,
            "version": "3.4.12",
            "ecosystem": "npm"
          },
          {
            "name": "jsdom",
            "direct": true,
            "version": "29.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@asamuzakjp/css-color",
            "direct": false,
            "version": "5.1.11",
            "ecosystem": "npm"
          },
          {
            "name": "@asamuzakjp/dom-selector",
            "direct": false,
            "version": "7.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@asamuzakjp/generational-cache",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@asamuzakjp/nwsapi",
            "direct": false,
            "version": "2.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/biome",
            "direct": false,
            "version": "2.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-darwin-arm64",
            "direct": false,
            "version": "2.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-darwin-x64",
            "direct": false,
            "version": "2.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-arm64",
            "direct": false,
            "version": "2.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-arm64-musl",
            "direct": false,
            "version": "2.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-x64",
            "direct": false,
            "version": "2.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-x64-musl",
            "direct": false,
            "version": "2.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-win32-arm64",
            "direct": false,
            "version": "2.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-win32-x64",
            "direct": false,
            "version": "2.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "@bramus/specificity",
            "direct": false,
            "version": "2.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "@csstools/color-helpers",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@csstools/css-calc",
            "direct": false,
            "version": "3.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@csstools/css-color-parser",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@csstools/css-parser-algorithms",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@csstools/css-syntax-patches-for-csstree",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "@csstools/css-tokenizer",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/core",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/wasi-threads",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@exodus/bytes",
            "direct": false,
            "version": "1.15.1",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/gen-mapping",
            "direct": false,
            "version": "0.3.13",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/wasm-runtime",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "@oxc-project/types",
            "direct": false,
            "version": "0.130.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-android-arm64",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-arm64",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-x64",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-freebsd-x64",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-gnu",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-musl",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-ppc64-gnu",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-s390x-gnu",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-gnu",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-musl",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-openharmony-arm64",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-wasm32-wasi",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-arm64-msvc",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-x64-msvc",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/pluginutils",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-android-arm-eabi",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-android-arm64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-darwin-arm64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-darwin-x64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-freebsd-arm64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-freebsd-x64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm-gnueabihf",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm-musleabihf",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm64-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm64-musl",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-loong64-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-loong64-musl",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-ppc64-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-ppc64-musl",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-riscv64-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-riscv64-musl",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-s390x-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-x64-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-x64-musl",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-openbsd-x64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-openharmony-arm64",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-arm64-msvc",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-ia32-msvc",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-x64-gnu",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-x64-msvc",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "@standard-schema/spec",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tybys/wasm-util",
            "direct": false,
            "version": "0.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/chai",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/deep-eql",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@types/jsdom",
            "direct": false,
            "version": "28.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "26.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/tough-cookie",
            "direct": false,
            "version": "4.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@types/trusted-types",
            "direct": false,
            "version": "2.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/expect",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/mocker",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/pretty-format",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/runner",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/snapshot",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/spy",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/utils",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "acorn",
            "direct": false,
            "version": "8.17.0",
            "ecosystem": "npm"
          },
          {
            "name": "any-promise",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "assertion-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "bidi-js",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "5.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "bundle-require",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "cac",
            "direct": false,
            "version": "6.7.14",
            "ecosystem": "npm"
          },
          {
            "name": "chai",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "chokidar",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "confbox",
            "direct": false,
            "version": "0.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "consola",
            "direct": false,
            "version": "3.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "css-tree",
            "direct": false,
            "version": "3.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "data-urls",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "decimal.js",
            "direct": false,
            "version": "10.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "entities",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-module-lexer",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "expect-type",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "fdir",
            "direct": false,
            "version": "6.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "fix-dts-default-cjs-exports",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "13.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "html-encoding-sniffer",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-potential-custom-element-name",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "joycon",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "lefthook",
            "direct": false,
            "version": "2.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "lefthook-darwin-arm64",
            "direct": false,
            "version": "2.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "lefthook-darwin-x64",
            "direct": false,
            "version": "2.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "lefthook-freebsd-arm64",
            "direct": false,
            "version": "2.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "lefthook-freebsd-x64",
            "direct": false,
            "version": "2.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "lefthook-linux-arm64",
            "direct": false,
            "version": "2.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "lefthook-linux-x64",
            "direct": false,
            "version": "2.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "lefthook-openbsd-arm64",
            "direct": false,
            "version": "2.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "lefthook-openbsd-x64",
            "direct": false,
            "version": "2.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "lefthook-windows-arm64",
            "direct": false,
            "version": "2.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "lefthook-windows-x64",
            "direct": false,
            "version": "2.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-android-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-freebsd-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-arm64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-x64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lilconfig",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "lines-and-columns",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "load-tsconfig",
            "direct": false,
            "version": "0.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "11.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "mdn-data",
            "direct": false,
            "version": "2.27.1",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "10.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "minipass",
            "direct": false,
            "version": "7.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "mlly",
            "direct": false,
            "version": "1.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "mz",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.15",
            "ecosystem": "npm"
          },
          {
            "name": "object-assign",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "obug",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "package-json-from-dist",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "parse5",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-scurry",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "pathe",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "pirates",
            "direct": false,
            "version": "4.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "pkg-types",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.16",
            "ecosystem": "npm"
          },
          {
            "name": "postcss-load-config",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "punycode",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "readdirp",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "require-from-string",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "resolve-from",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "rimraf",
            "direct": false,
            "version": "6.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "rolldown",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "rollup",
            "direct": false,
            "version": "4.62.2",
            "ecosystem": "npm"
          },
          {
            "name": "saxes",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "siginfo",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "source-map",
            "direct": false,
            "version": "0.7.6",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "stackback",
            "direct": false,
            "version": "0.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "std-env",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "sucrase",
            "direct": false,
            "version": "3.35.1",
            "ecosystem": "npm"
          },
          {
            "name": "symbol-tree",
            "direct": false,
            "version": "3.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "thenify",
            "direct": false,
            "version": "3.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "thenify-all",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinybench",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "0.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "tinyglobby",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "npm"
          },
          {
            "name": "tinyrainbow",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "tldts",
            "direct": false,
            "version": "7.4.9",
            "ecosystem": "npm"
          },
          {
            "name": "tldts-core",
            "direct": false,
            "version": "7.4.9",
            "ecosystem": "npm"
          },
          {
            "name": "tough-cookie",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "tr46",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "tree-kill",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "ts-interface-checker",
            "direct": false,
            "version": "0.1.13",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "tsup",
            "direct": false,
            "version": "8.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "ufo",
            "direct": false,
            "version": "1.6.4",
            "ecosystem": "npm"
          },
          {
            "name": "undici",
            "direct": false,
            "version": "7.28.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "7.28.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "8.0.13",
            "ecosystem": "npm"
          },
          {
            "name": "vitest",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "w3c-xmlserializer",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "webidl-conversions",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "whatwg-mimetype",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "whatwg-url",
            "direct": false,
            "version": "16.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "why-is-node-running",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "xml-name-validator",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "xmlchars",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 237,
        "direct_count": 2,
        "indirect_count": 235
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 377,
        "open_issues": 2,
        "closed_ratio": 0.962,
        "closed_issues": 50,
        "closed_unmerged_prs": 27
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "kkomelin",
          "commits": 521,
          "avatar_url": "https://avatars.githubusercontent.com/u/755066?v=4"
        },
        {
          "type": "User",
          "login": "NEllusion",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/15018469?v=4"
        },
        {
          "type": "User",
          "login": "BohdanYavorskyi",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/34753235?v=4"
        },
        {
          "type": "User",
          "login": "HimanshuBari21",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/90155213?v=4"
        },
        {
          "type": "User",
          "login": "dargmuesli",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/4778485?v=4"
        },
        {
          "type": "User",
          "login": "karlhorky",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/1935696?v=4"
        },
        {
          "type": "User",
          "login": "wSedlacek",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/8206108?v=4"
        }
      ],
      "contributors_sampled": 7,
      "top_contributor_share": 0.987
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build_test.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        "biome.json"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 9,
            "reason": "19 out of 21 merged PRs checked by a CI test -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/9 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 7,
            "reason": "3 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "64d2faefafc77a480fb7cc4f46330cb8d628ce78",
        "ran_at": "2026-07-22T10:35:58Z",
        "aggregate_score": 4.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-21T22:42:36Z",
      "oldest_open_prs": [
        {
          "number": 463,
          "created_at": "2026-07-20T22:45:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-17T10:21:36Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 394,
          "created_at": "2026-02-21T12:19:33Z",
          "last_comment_at": "2026-04-05T17:09:27Z",
          "last_comment_author": "bedamedia"
        },
        {
          "number": 395,
          "created_at": "2026-02-22T02:32:25Z",
          "last_comment_at": "2026-02-22T05:02:01Z",
          "last_comment_author": "kkomelin"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/kkomelin/isomorphic-dompurify",
    "host": "github.com",
    "name": "isomorphic-dompurify",
    "owner": "kkomelin"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 73,
      "inputs": {
        "security": 58,
        "vitality": 95,
        "community": 65,
        "governance": 62,
        "engineering": 79
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 95,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "commits_last_year": 210,
              "human_commit_share": 0.44,
              "days_since_last_push": 1,
              "active_weeks_last_year": 41
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "41/52 weeks with commits",
                "points": 28.4,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 41
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "210 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 210
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "3.19.0",
              "releases_from_tags": false,
              "days_since_latest_release": 4,
              "mean_days_between_releases": 9.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~9.5 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 9.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 4,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 4 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 65,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "forks": 16,
              "stars": 590,
              "watchers": 3,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "590 stars",
                "points": 44.9,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 590
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "16 forks",
                "points": 9.8,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "3 watchers",
                "points": 1.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "excellent",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "packages": [
                "isomorphic-dompurify"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 20785134
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "20,785,134 downloads/month across npm",
                "points": 80,
                "status": "met",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 20785134,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 62,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 7,
              "top_contributor_share": 0.987
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 99% of commits",
                "points": 0.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 99
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "7 contributors",
                "points": 9.5,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 81,
            "inputs": {
              "merged_prs": 377,
              "open_issues": 2,
              "closed_issues": 50,
              "issue_closed_ratio": 0.962,
              "closed_unmerged_prs": 27
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "96% of issues closed",
                "points": 45,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 96
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "377/404 decided PRs merged",
                "points": 35.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 377,
                      "decided": 404
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/9 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "followers": 102,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "kkomelin",
              "public_repos": 81,
              "account_age_days": 5564
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "102 followers of kkomelin",
                "points": 14.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 102,
                      "login": "kkomelin"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "81 public repos, account ~15 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 81
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "isomorphic-dompurify"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 4
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 4 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "104 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 104
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 79,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "biome.json",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "19 out of 21 merged PRs checked by a CI test -- score normalized to 9",
                "points": 18,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "dompurify",
                "xss-filter",
                "xss",
                "isomorphic",
                "wrapper",
                "universal",
                "ssr",
                "html-escape",
                "security",
                "sanitize",
                "sanitize-html",
                "sanitizer",
                "isomorphic-dompurify"
              ],
              "has_wiki": true,
              "homepage": "https://www.npmjs.com/package/isomorphic-dompurify",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://www.npmjs.com/package/isomorphic-dompurify",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "13 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 58,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 47,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 4.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "19 out of 21 merged PRs checked by a CI test -- score normalized to 9",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/9 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "3 existing vulnerabilities detected",
                "points": 5.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 237 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 237
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 3,
              "affected_packages": 2,
              "assessed_packages": 237,
              "unassessed_packages": 0,
              "affected_by_severity": "high 1, low 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 237,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 15
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 66,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.955,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "42 of 44 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 42,
                      "sampled": 44
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.27,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.56
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "biome.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "27 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 27,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "56 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 56,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 3600,
              "source_files_sampled": 7,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/7 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 7,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "deps.dev does not index npm:isomorphic-dompurify@3.19.0; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-22T10:36:14.032860Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/k/kkomelin/isomorphic-dompurify.svg",
  "full_name": "kkomelin/isomorphic-dompurify",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.26.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — npm.

Software-Gesundheitsindex

Bewertungsprofil

Eigentümerschaft

Paket-Ökosysteme

Metriken nach Kategorie

Eckdaten

Warnungen zur Datenerhebung

Weitere Details

Verwandte Einträge