@mergesignal/shared

v0.18.0

Published

MergeSignal shared scan contract, presentation policy, and trusted validation

Vulnerabilities

Powered byPowered by Snyk
  • 0High
  • 0Medium
  • 0Low

Links

Git

Maintainers

shafiryrshafiryr

Keywords

Readme

@mergesignal/shared

Published npm package containing the MergeSignal scan contract, presentation policy, and trusted-output validation.

npm install @mergesignal/shared

Current version: see package.json. Pin exact semver in downstream consumers (especially the proprietary analysis engine).

What it provides

  • Types and schemas for ScanRequest, ScanResult, upgrade simulation, and related wire formats
  • Validation for scan results and trusted CI output guards
  • Presentation copy helpers used by the web app and CI summary renderers

Scan merge decisions use four wire values: safe, needs_review, risky, and indeterminate. Product semantics are documented in Scan decision states.

Usage

import {} from /* types, validators, copy */ "@mergesignal/shared";

See dist/index.d.ts after install for the full export surface.

OSS monorepo vs npm

Inside this repository, apps use the workspace package via pnpm. External consumers (e.g. mergesignal-engine) install from the public npm registry with an exact version pin.

License

MIT — see LICENSE for the monorepo; npm package license field in package.json.

More