[botandbang]

Adds JSDoc types to every package's public API and publishes .d.ts files generated from them. Core defines the shared data types (Data, ReleaseLine, Release, Support, Security, Options and more), and the other packages import them. static lists @nodevu/core as an optional peer dependency for those types, and core depends on @types/luxon because now accepts a Luxon DateTime.

Each package has a tsconfig.json extending tsconfig.base.json, which type-checks the JavaScript in strict mode. npm run types (tsc -b) builds them in dependency order into <package>/types/, and each package gets a types field and ships that folder. The declarations are committed because releases pack without installing dependencies, and a new types CI job rebuilds them and fails when they're stale. test/types.mts checks the published types the way a TypeScript project would use them, including inputs they must reject.

Source changes are annotations plus a few rewrites with the same results: core iterates the index with versions.keys(), converts values to strings explicitly where it relied on implicit conversion, and ranges reads support.lts with ?.. Generated types are excluded from coverage and linting.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​types/​semver@​7.8.0
	npm/​@​types/​luxon@​3.7.6
	npm/​@​types/​node@​22.20.5
	npm/​typescript@​7.0.2

View full report