Hermex Output Review

← all cases

release-age-root-scope

changed

Asserts — scope: root enforces only the direct copy, and still surfaces the overdue nested copy as an advisory breach rather than hiding it.

Ran hermex comply in fixtures/repos/version-conflict → exit 1, as asserted

Config fixtures/repos/version-conflict/hermex.config.ts · Fixture fixtures/repos/version-conflict (overview) · Case release-age-root-scope (dossier)

Registry offline, served from fixtures/registry/timelines.ts — no network

Reproduce locally: pnpm run test:output -- --filter release-age-root-scope

Config

fixtures/repos/version-conflict/hermex.config.ts — resolved, as the loader sees it

{
  "releaseAge": {
    "cacheDisabled": true
  },
  "rules": {
    "release-age": [
      {
        "severity": "error",
        "patterns": [
          "react"
        ],
        "scope": "root"
      }
    ]
  },
  "output": {
    "components": false,
    "patterns": false,
    "versus": false
  }
}

Diff against the target branch

Diffs are unified format: - is the target branch, + is this run. @@ -12,7 +12,9 @@ is a hunk header — unchanged lines were skipped, and the hunk below covers 7 lines from line 12 of the target branch and 9 lines from line 12 of this run.

--- target/stdout.txt
+++ current/stdout.txt
@@ -10,9 +10,9 @@
 ┌───────────────────────┬───────────┬──────────────────────────────────────────────────┐
 │ Package               │ Installed │ Target                                           │
 ├───────────────────────┼───────────┼──────────────────────────────────────────────────┤
-│ @hermex/legacy-widget │ 1.0.0     │ 🟡 major 2.1.0 (240 days overdue) [not enforced] │
-├───────────────────────┼───────────┼──────────────────────────────────────────────────┤
 │ react                 │ 18.3.1    │ 🔴 major 19.1.0 (340 days overdue)               │
+├───────────────────────┼───────────┼──────────────────────────────────────────────────┤
+│ @hermex/legacy-widget │ 1.0.0     │ 🟡 major 2.1.0 (240 days overdue) [not enforced] │
 └───────────────────────┴───────────┴──────────────────────────────────────────────────┘
 
 Notes:

Full output

stdout.txt
hermex v<version>
- Parsing lockfile...
✔ Found pnpm lockfile (supports: v5, v6, v9) - 2 packages
✔ Found 3 files
✔ Analysis complete! Analyzed 3/3 files
✔ Release age fetched

📦 Packages

┌───────────────────────┬───────────┬──────────────────────────────────────────────────┐
│ Package               │ Installed │ Target                                           │
├───────────────────────┼───────────┼──────────────────────────────────────────────────┤
│ react                 │ 18.3.1    │ 🔴 major 19.1.0 (340 days overdue)               │
├───────────────────────┼───────────┼──────────────────────────────────────────────────┤
│ @hermex/legacy-widget │ 1.0.0     │ 🟡 major 2.1.0 (240 days overdue) [not enforced] │
└───────────────────────┴───────────┴──────────────────────────────────────────────────┘

Notes:
  🔵 react → 2 versions installed (bundle impact): 17.0.2, 18.3.1 → 1 nested copy overdue, not enforced but recommended to resolve

1 error, 1 warning

🔴 Not compliant
  1 mandatory violation found
stderr.txt