npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

@dpuse/dpuse-tool-d3

v0.0.17

Published

A TypeScript wrapper for D3, Billboard.js, and Observable Plot that implements the Data Positioning chart-rendering interface, providing ERD (dagre), Sankey (d3-sankey), network (d3-force), tree (d3-hierarchy), and bar chart (billboard.js, Observable Plot

Vulnerabilities

Powered byPowered by Snyk
  • 0High
  • 0Medium
  • 0Low

Links

Git

Maintainers

terrelljmterrelljm

Keywords

Readme

DPUse D3 Tool

License: MIT

A TypeScript wrapper for D3 that implements the Data Positioning chart-rendering interface, starting with a Sankey diagram renderer built on d3-sankey and d3-selection.

Installation

There's no need to install this tool manually. Once released, it's uploaded to the Data Positioning Engine cloud and becomes instantly available to all new instances of the browser app. A notification about the new version is also sent to all existing browser apps.

Usage

Basic usage example with no error handling.

import type { D3Tool as D3ToolType, SankeyDiagramData } from '@dpuse/dpuse-tool-d3';

async function loadD3Tool(version: string): Promise<D3ToolType> {
    if (d3Tool) return d3Tool;

    const URL = `https://engine-eu.dpuse.app/tools/d3_v${version}/dpuse-tool-d3.es.js`;
    const D3Tool = (await import(/* @vite-ignore */ URL)).D3Tool as new () => D3ToolType;
    return new D3Tool();
}

const d3Tool = await loadD3Tool('n.n.nnn');

const data: SankeyDiagramData = {
    nodes: [
        { id: 'sourcing', name: 'Sourcing' },
        { id: 'contextualising', name: 'Contextualising' },
        { id: 'publishing', name: 'Publishing' }
    ],
    links: [
        { source: 'sourcing', target: 'contextualising', value: 8 },
        { source: 'contextualising', target: 'publishing', value: 5 }
    ]
};

const view = d3Tool.renderSankeyDiagram(data, renderTo);
// Call view.resize() after the container's size changes to redraw the layout.

License data is collected automatically on each release using license-checker. The following table lists all production dependencies. These dependencies (including transitive ones) have been checked and confirmed to use BSD-3-Clause, ISC, MIT, or Unlicense — all permissive, commercially-friendly licenses. Users of the uploaded library are covered by these checks; developers cloning this repository should independently verify development dependencies.

| Dependency | Version | License(s) | Document | | :---------------------------------------------------------------------------- | :-----: | :----------- | :-------------------------------------------------------------------- | | @dagrejs/dagre | 3.0.0 | MIT | LICENSE | | @dagrejs/graphlib | 4.0.1 | MIT | LICENSE | | @dpuse/dpuse-shared | 0.3.758 | MIT | LICENSE | | @observablehq/plot | 0.6.17 | ISC | LICENSE | | @types/d3-selection | 3.0.11 | MIT | LICENSE | | @types/d3-transition | 3.0.9 | MIT | LICENSE | | billboard.js | 4.0.3 | MIT | LICENSE | | binary-search-bounds | 2.0.5 | MIT | LICENSE | | commander | 7.2.0 | MIT | LICENSE | | d3-array | 3.2.4 | ISC | LICENSE | | d3-axis | 3.0.0 | ISC | LICENSE | | d3-brush | 3.0.0 | ISC | LICENSE | | d3-chord | 3.0.1 | ISC | LICENSE | | d3-color | 3.1.0 | ISC | LICENSE | | d3-contour | 4.0.2 | ISC | LICENSE | | d3-delaunay | 6.0.4 | ISC | LICENSE | | d3-dispatch | 3.0.1 | ISC | LICENSE | | d3-drag | 3.0.0 | ISC | LICENSE | | d3-dsv | 3.0.1 | ISC | LICENSE | | d3-ease | 3.0.1 | BSD-3-Clause | LICENSE | | d3-fetch | 3.0.1 | ISC | LICENSE | | d3-force | 3.0.0 | ISC | LICENSE | | d3-format | 3.1.2 | ISC | LICENSE | | d3-geo | 3.1.1 | ISC | LICENSE | | d3-hierarchy | 3.1.2 | ISC | LICENSE | | d3-interpolate | 3.0.1 | ISC | LICENSE | | d3-path | 3.1.0 | ISC | LICENSE | | d3-polygon | 3.0.1 | ISC | LICENSE | | d3-quadtree | 3.0.1 | ISC | LICENSE | | d3-random | 3.0.1 | ISC | LICENSE | | d3-sankey | 0.12.3 | BSD-3-Clause | LICENSE | | d3-scale-chromatic | 3.1.0 | ISC | LICENSE | | d3-scale | 4.0.2 | ISC | LICENSE | | d3-selection | 3.0.0 | ISC | LICENSE | | d3-shape | 3.2.0 | ISC | LICENSE | | d3-time-format | 4.1.0 | ISC | LICENSE | | d3-time | 3.1.0 | ISC | LICENSE | | d3-timer | 3.0.1 | ISC | LICENSE | | d3-transition | 3.0.1 | ISC | LICENSE | | d3-zoom | 3.0.0 | ISC | LICENSE | | d3 | 7.9.0 | ISC | LICENSE | | delaunator | 5.1.0 | ISC | LICENSE | | iconv-lite | 0.6.3 | MIT | LICENSE | | internmap | 2.0.3 | ISC | LICENSE | | interval-tree-1d | 1.0.4 | MIT | LICENSE | | isoformat | 0.2.1 | ISC | LICENSE | | robust-predicates | 3.0.3 | Unlicense | LICENSE | | rw | 1.3.3 | BSD-3-Clause | LICENSE | | safer-buffer | 2.1.2 | MIT | LICENSE |

The dependency tree below lists every package in this project — direct and transitive — along with its installed version, release date, and update status. Packages flagged ❗ have a newer version available; ⚠️ indicates a package that hasn't been updated in the last 6 months or longer. Neither flag necessarily indicates a problem: we let new releases stabilise before upgrading, and some packages are simply mature and stable, requiring no active development.

  • @dagrejs/dagre 3.0.0 — 4 months ago: 2026-03-22
  • @dpuse/dpuse-shared 0.3.758 — this month: 2026-07-27
  • @observablehq/plot 0.6.17 — 17 months ago: 2025-02-14 ⚠️
    • d3 7.9.0 — 28 months ago: 2024-03-12 ⚠️
      • d3-array 3.2.4 — 38 months ago: 2023-05-30 ⚠️
      • d3-axis 3.0.0 — 61 months ago: 2021-06-09 ⚠️
      • d3-brush 3.0.0 — 61 months ago: 2021-06-10 ⚠️
      • d3-chord 3.0.1 — 61 months ago: 2021-06-05 ⚠️
        • d3-path 3.1.0 — 43 months ago: 2022-12-19 ⚠️
      • d3-color 3.1.0 — 52 months ago: 2022-03-28 ⚠️
      • d3-contour 4.0.2 — 42 months ago: 2023-01-11 ⚠️
        • d3-array 3.2.4 — 38 months ago: 2023-05-30 ⚠️
      • d3-delaunay 6.0.4 — 40 months ago: 2023-04-01 ⚠️
      • d3-dispatch 3.0.1 — 61 months ago: 2021-06-05 ⚠️
      • d3-drag 3.0.0 — 61 months ago: 2021-06-09 ⚠️
      • d3-dsv 3.0.1 — 61 months ago: 2021-06-05 ⚠️
        • commander 7.2.0 — 64 months ago: 2021-03-21 ⚠️ → latest: 15.0.0 — 2 months ago: 2026-05-29 ❗
        • iconv-lite 0.6.3 — 62 months ago: 2021-05-24 ⚠️ → latest: 0.7.3 — this month: 2026-07-03 ❗
        • rw 1.3.3 — 114 months ago: 2017-01-20 ⚠️
      • d3-ease 3.0.1 — 61 months ago: 2021-06-05 ⚠️
      • d3-fetch 3.0.1 — 61 months ago: 2021-06-05 ⚠️
        • d3-dsv 3.0.1 — 61 months ago: 2021-06-05 ⚠️
      • d3-force 3.0.0 — 61 months ago: 2021-06-05 ⚠️
      • d3-format 3.1.2 — 6 months ago: 2026-01-14
      • d3-geo 3.1.1 — 28 months ago: 2024-03-12 ⚠️
        • d3-array 3.2.4 — 38 months ago: 2023-05-30 ⚠️
      • d3-hierarchy 3.1.2 — 51 months ago: 2022-04-02 ⚠️
      • d3-interpolate 3.0.1 — 61 months ago: 2021-06-05 ⚠️
      • d3-path 3.1.0 — 43 months ago: 2022-12-19 ⚠️
      • d3-polygon 3.0.1 — 61 months ago: 2021-06-05 ⚠️
      • d3-quadtree 3.0.1 — 61 months ago: 2021-06-05 ⚠️
      • d3-random 3.0.1 — 61 months ago: 2021-06-05 ⚠️
      • d3-scale-chromatic 3.1.0 — 28 months ago: 2024-03-12 ⚠️
      • d3-scale 4.0.2 — 58 months ago: 2021-09-24 ⚠️
      • d3-selection 3.0.0 — 61 months ago: 2021-06-07 ⚠️
      • d3-shape 3.2.0 — 43 months ago: 2022-12-20 ⚠️
      • d3-time-format 4.1.0 — 55 months ago: 2021-12-04 ⚠️
      • d3-time 3.1.0 — 43 months ago: 2022-12-02 ⚠️
        • d3-array 3.2.4 — 38 months ago: 2023-05-30 ⚠️
      • d3-timer 3.0.1 — 61 months ago: 2021-06-05 ⚠️
      • d3-transition 3.0.1 — 61 months ago: 2021-06-09 ⚠️
      • d3-zoom 3.0.0 — 61 months ago: 2021-06-10 ⚠️
    • interval-tree-1d 1.0.4 — 61 months ago: 2021-06-03 ⚠️
    • isoformat 0.2.1 — 58 months ago: 2021-09-24 ⚠️
  • billboard.js 4.0.3 — this month: 2026-07-06
  • d3-drag 3.0.0 — 61 months ago: 2021-06-09 ⚠️
  • d3-force 3.0.0 — 61 months ago: 2021-06-05 ⚠️
    • d3-dispatch 3.0.1 — 61 months ago: 2021-06-05 ⚠️
    • d3-quadtree 3.0.1 — 61 months ago: 2021-06-05 ⚠️
    • d3-timer 3.0.1 — 61 months ago: 2021-06-05 ⚠️
  • d3-hierarchy 3.1.2 — 51 months ago: 2022-04-02 ⚠️
  • d3-sankey 0.12.3 — 82 months ago: 2019-09-02 ⚠️
    • d3-array 3.2.4 — 38 months ago: 2023-05-30 ⚠️
      • internmap 2.0.3 — 58 months ago: 2021-09-20 ⚠️
    • d3-shape 3.2.0 — 43 months ago: 2022-12-20 ⚠️
  • d3-selection 3.0.0 — 61 months ago: 2021-06-07 ⚠️
  • d3-shape 3.2.0 — 43 months ago: 2022-12-20 ⚠️
    • d3-path 3.1.0 — 43 months ago: 2022-12-19 ⚠️
  • d3-zoom 3.0.0 — 61 months ago: 2021-06-10 ⚠️

This connector is automatically uploaded to the DPUse Engine cloud once released and becomes instantly available to all new browser app instances, with existing instances notified of the update.

You may view or clone this repository for your own purposes, such as building a new, similar connector, though there is currently no process to accept third-party connectors into DPUse at this stage. Cloned or forked code is unsupported and isn't guaranteed to remain compatible with the DPUse Engine as it evolves.

git clone https://github.com/dpuse/dpuse-tool-d3.git
cd dpuse-tool-d3
npm install

Requires Node.js 23.11 or later, npm 11 or later, and TypeScript 6.0.3 or later.

The Bundle Analysis Report is generated automatically on each release using Sonda, which analyses final source maps to reveal the actual effects of tree-shaking and minification rather than relying on pre-build estimates.

Note: Sonda's Vite reports currently exclude CSS files, since Vite does not generate source maps for CSS.

| Chunk/Module/File | Composition | | :--------------------------------------------------------- | :--------------------------- | | dist/billboardJs-BTW-G9h0.js | 268.7 kB · brotli 66.9 kB | |     billboard.js | ███████░░░░░░░░░░░░░ 32.7% | |     (unassigned) → [unassigned] | █░░░░░░░░░░░░░░░░░░░ 2.7% | |     d3-shape | ░░░░░░░░░░░░░░░░░░░░ 2.3% | |     src → billboardJs.ts | ░░░░░░░░░░░░░░░░░░░░ 0.0% | |     d3-selection → src/selectAll.js | ░░░░░░░░░░░░░░░░░░░░ 0.0% | | dist/observablePlot-D7o8-dnK.js | 226.3 kB · brotli 56.7 kB | |     @observablehq/plot | ████░░░░░░░░░░░░░░░░ 18.9% | |     d3-geo | █░░░░░░░░░░░░░░░░░░░ 4.5% | |     (unassigned) → [unassigned] | █░░░░░░░░░░░░░░░░░░░ 2.9% | |     d3-scale-chromatic | █░░░░░░░░░░░░░░░░░░░ 2.5% | |     d3-array | ░░░░░░░░░░░░░░░░░░░░ 0.9% | |     d3-scale | ░░░░░░░░░░░░░░░░░░░░ 0.8% | |     d3-color | ░░░░░░░░░░░░░░░░░░░░ 0.5% | |     d3-shape | ░░░░░░░░░░░░░░░░░░░░ 0.4% | |     d3-interpolate | ░░░░░░░░░░░░░░░░░░░░ 0.2% | |     isoformat | ░░░░░░░░░░░░░░░░░░░░ 0.1% | |     src → observablePlot.ts | ░░░░░░░░░░░░░░░░░░░░ 0.1% | | dist/erdDiagram-b-qDkEhY.js | 53.9 kB · brotli 14.2 kB | |     @dagrejs/dagre → dist/dagre.esm.js | █░░░░░░░░░░░░░░░░░░░ 6.6% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.5% | |     src → erdDiagram.ts | ░░░░░░░░░░░░░░░░░░░░ 0.4% | |     d3-shape → src/line.js | ░░░░░░░░░░░░░░░░░░░░ 0.1% | | dist/axis-B7xlWKkC.js | 44.9 kB · brotli 11.1 kB | |     d3-time-format | ░░░░░░░░░░░░░░░░░░░░ 1.5% | |     d3-scale | ░░░░░░░░░░░░░░░░░░░░ 1.1% | |     d3-format | ░░░░░░░░░░░░░░░░░░░░ 0.8% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.8% | |     d3-time | ░░░░░░░░░░░░░░░░░░░░ 0.8% | |     d3-axis | ░░░░░░░░░░░░░░░░░░░░ 0.5% | |     d3-array | ░░░░░░░░░░░░░░░░░░░░ 0.3% | |     d3-interpolate | ░░░░░░░░░░░░░░░░░░░░ 0.2% | |     internmap → src/index.js | ░░░░░░░░░░░░░░░░░░░░ 0.2% | |     d3-brush → src/brush.js | ░░░░░░░░░░░░░░░░░░░░ 0.0% | |     d3-shape → src/math.js | ░░░░░░░░░░░░░░░░░░░░ 0.0% | | dist/src-DnMaAyIP.js | 35.1 kB · brotli 9.4 kB | |     d3-transition | ░░░░░░░░░░░░░░░░░░░░ 1.8% | |     d3-color | ░░░░░░░░░░░░░░░░░░░░ 1.2% | |     d3-interpolate | ░░░░░░░░░░░░░░░░░░░░ 0.6% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.6% | |     d3-dispatch → src/dispatch.js | ░░░░░░░░░░░░░░░░░░░░ 0.3% | |     d3-timer | ░░░░░░░░░░░░░░░░░░░░ 0.2% | |     d3-drag | ░░░░░░░░░░░░░░░░░░░░ 0.1% | |     d3-selection | ░░░░░░░░░░░░░░░░░░░░ 0.1% | |     d3-ease → src/cubic.js | ░░░░░░░░░░░░░░░░░░░░ 0.0% | | dist/select-BIuoFcZG.js | 17.9 kB · brotli 3.9 kB | |     d3-selection | ░░░░░░░░░░░░░░░░░░░░ 2.0% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.5% | | dist/networkDiagram-QWVy8iRy.js | 17.7 kB · brotli 5.0 kB | |     d3-force | ░░░░░░░░░░░░░░░░░░░░ 0.9% | |     d3-quadtree | ░░░░░░░░░░░░░░░░░░░░ 0.9% | |     src → networkDiagram.ts | ░░░░░░░░░░░░░░░░░░░░ 0.4% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.3% | | dist/src-B7SGbtRQ.js | 12.8 kB · brotli 3.6 kB | |     d3-zoom | ░░░░░░░░░░░░░░░░░░░░ 1.5% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.2% | |     d3-interpolate → src/zoom.js | ░░░░░░░░░░░░░░░░░░░░ 0.1% | | dist/sankeyDiagram-Dgf87Zt4.js | 11.0 kB · brotli 3.2 kB | |     d3-sankey | ░░░░░░░░░░░░░░░░░░░░ 0.9% | |     src | ░░░░░░░░░░░░░░░░░░░░ 0.5% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.2% | | dist/treeDiagram-BJ_QF4os.js | 8.8 kB · brotli 2.7 kB | |     d3-hierarchy | ░░░░░░░░░░░░░░░░░░░░ 0.8% | |     src → treeDiagram.ts | ░░░░░░░░░░░░░░░░░░░░ 0.3% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.2% | | dist/drag-B46QGUMq.js | 4.3 kB · brotli 1.4 kB | |     d3-drag | ░░░░░░░░░░░░░░░░░░░░ 0.5% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.1% | | dist/path-Bt1sPr2f.js | 2.7 kB · brotli 1010 B | |     d3-path → src/path.js | ░░░░░░░░░░░░░░░░░░░░ 0.4% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.0% | | dist/bump-znhpCF6A.js | 1.8 kB · brotli 640 B | |     d3-shape | ░░░░░░░░░░░░░░░░░░░░ 0.2% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.1% | | dist/dpuse-tool-d3.es.js | 1.6 kB · brotli 441 B | |     src → index.ts | ░░░░░░░░░░░░░░░░░░░░ 0.2% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.0% | | dist/link-Dti9fi9g.js | 1.1 kB · brotli 435 B | |     d3-shape → src/link.js | ░░░░░░░░░░░░░░░░░░░░ 0.1% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.0% | | dist/sum-BAZU479z.js | 933 B · brotli 283 B | |     d3-array | ░░░░░░░░░░░░░░░░░░░░ 0.1% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.0% | | dist/linear-J4iYa1Bf.js | 754 B · brotli 313 B | |     d3-shape → src/curve/linear.js | ░░░░░░░░░░░░░░░░░░░░ 0.1% | |     (unassigned) → [unassigned] | ░░░░░░░░░░░░░░░░░░░░ 0.0% |

(unassigned) = bytes Sonda can't trace to a specific source line (whitespace, stray keywords, bundler-injected region markers) — not actual missing/unknown code.

Design Notes

  • All D3 submodules (d3-sankey, d3-selection, and their transitive d3-array/d3-shape dependencies) are bundled directly into this tool's build, the same way @dpuse/dpuse-tool-highcharts bundles Highcharts. There is exactly one copy of each module per page load regardless of how many times this tool is dynamically imported, since the browser's module registry caches import() calls by resolved URL.
  • Rendering happens on the main thread because it writes directly into a real HTMLElement - the DPUse Engine's connector/context processing runs inside a dedicated Web Worker, but presentation-rendering tools (this one and Highcharts) are loaded the same way dpuse-presenter-default is, directly by the host app.
  • Node identity is carried by a direct text label on every node, not by colour alone, so the categorical palette is free to cycle past its 8 fixed slots for diagrams with more nodes than that.

License: MIT DPUse version CI CodeQL Quality Gate Status

Documentation · Report a Vulnerability · Open an Issue

About DPUse

DPUse (Data Positioning & Use) is an in-browser application that positions your data for use through three core activities: sourcing, contextualising, and publishing. Sourcing uses a library of Connectors to establish Connections to applications, databases, file stores, and curated datasets; these connections are subsequently used to configure structured Data Views from the underlying sources. Contextualising extracts chronological events from those Data Views and maps them into comprehensive Context Models. This provides the DPUse Engine with the structural framework required to generate deterministic transactions, facts, or observations. Publishing employs a library of Presenters to render standard Presentations immediately using the contextualised data; additionally, Cookbooks of Recipes allow you to build Data Apps using your preferred tools.

Introduction

Billboard.js

Observable Plot

d3-hierarchy

d3-sankey

dpuse-erd

Contributing

This repository is maintained solely by its owner and does not, at present, accept external contributions into the canonical repo. Its source is published openly under the MIT License.

License

This project is licensed under the MIT License, permitting free use, modification, and distribution.

MIT © 2026-present Jonathan Terrell

Security & Quality

CodeQL

CodeQL static analysis runs on every push to main and on a weekly schedule, scanning TypeScript, JavaScript, Rust, and GitHub Actions workflow files for security vulnerabilities and coding errors.

SonarCloud

SonarCloud performs continuous code quality and security analysis on every push, detecting bugs, code smells, and security vulnerabilities in the TypeScript source.

Vulnerability Scanning

Two complementary tools continuously monitor dependencies for known vulnerabilities:

  • npm audit runs on every push to main via the CI workflow, failing the build if any high or critical severity vulnerabilities are detected.
  • GitHub Dependabot automatically raises pull requests to update vulnerable dependencies, drawing on the GitHub Advisory Database which combines NVD and npm-specific advisories.

Supply Chain Security

Socket.dev monitors all dependencies for supply chain risk — detecting malicious packages, dependency confusion, typosquatting, and suspicious behaviour that may not yet have a CVE.

Reporting Vulnerabilities

Please do not open public GitHub issues for security vulnerabilities. Use GitHub private vulnerability reporting instead. See SECURITY.md for the full disclosure policy, contact details, and expected response times.

OpenSSF 🚧

OpenSSF Scorecard

This project is working towards the OpenSSF Best Practices Passing badge, a self-certification covering security policy, vulnerability reporting, build processes, code quality, and more. Currently the OpenSSF Scorecard provides an independent automated assessment of the project's security practices and is an ongoing area of improvement.

Contributing

This repository is maintained solely by its owner and does not, at present, accept external contributions into the canonical repo. Its source is published openly under the MIT License — every DPUse project is fully open source except DPUse Engine, which remains closed and proprietary.

For security vulnerabilities, see Reporting Vulnerabilities. For bugs, inconsistencies, or other feedback, open a GitHub issue — feedback is read, but responses and fixes are at the maintainer's discretion.

License

This project is licensed under the MIT License, permitting free use, modification, and distribution.

MIT © 2026-present Jonathan Terrell