RepositoryCurrent collected state Current
Observed since 20 Oct, 22:00 UTC
No superseded metadata states collected. Unchanged observations do not create new revisions.
PACKAGE EXPLORERView in registry
@021.is/spine-quality
npmShipping configs for the Spine quality gate: biome, tsc, knip, dependency-cruiser (hexagonal layer rules), semgrep OWASP, vitest coverage, size-limit, lighthouse-ci. One install gives your app the same gate.
Versions collected2
Direct dependencies0From release 0.4.3
Last observed20 Oct, 22:00 UTC
README
Current package documentation@021.is/spine-quality
Shipping configs for the Spine quality gate. Every product consumes the same set.
Use
// biome.json
{ "extends": "@021.is/spine-quality/biome" }
// tsconfig.json (Next app)
{ "extends": "@021.is/spine-quality/tsconfig-next" }
// knip.json
{ "extends": "@021.is/spine-quality/knip" }
// .dependency-cruiser.cjs
module.exports = require("@021.is/spine-quality/dependency-cruiser");
// size-limit
{ "extends": "@021.is/spine-quality/size-limit" }
# semgrep
semgrep ci --config "$(node -p "require.resolve('@021.is/spine-quality/semgrep')")"
What's enforced
| Check | Tool | Blocking | |
|---|---|---|---|
| 🎨 | Biome lint (no any, no console, no unused imports) | biome | yes |
| 🎨 | Format | biome | yes |
| 🔍 | tsc --strict --noEmit | tsc | yes |
| 🔍 | Type coverage ≥ 99% | type-coverage | yes |
| 🧹 | Dead exports + dead deps | knip | yes |
| 🧹 | No circular deps | madge | yes |
| 🏛️ | Hexagonal layer rules (domain can't import adapters, etc.) | dependency-cruiser | yes |
| 🔒 | OWASP top-10 + Spine custom rules | semgrep | yes |
| 🏛️ | Spine custom AST (ResponseDto, enum-over-string, OpenAPI, i18n) | spine-lint | yes |
| 🔒 | High + critical vulns | npm audit | yes |
| 🧪 | Tests pass | vitest | yes |
| 🧪 | Coverage ≥ 70% lines / 60% branches | vitest | yes |
| 📦 | Bundle size ≤ 200 KB gzipped per route | size-limit | yes |
Tweaking
If a check is genuinely wrong for your repo, override in your local config — but document why in AGENTS.md. Don't disable checks silently.
Downloads & popularity
Awaiting observationsNo metric observations yet
Download counts and popularity will appear here as the collector receives them.
Versions 2
Collected releasesPackage advisories
0No matching advisories collected
This describes our collected data; it is not a security assessment.
Repository
PENDINGMetadata history
Meaningful changesRecord identity
package:108fabd59459fa8c6e915f4a719df91510ab800785c0e6e6d77d19080e1eaa0c