release-age-root-scopeunchanged
Asserts — scope: root enforces only the direct copy, and still surfaces the overdue nested copy as an advisory breach rather than hiding it.
Ran hermex comply in fixtures/repos/version-conflict → exit 1, as asserted
Config fixtures/repos/version-conflict/hermex.config.ts · Fixture fixtures/repos/version-conflict (overview) · Case release-age-root-scope (dossier)
Registry offline, served from fixtures/registry/timelines.ts — no network
Reproduce locally: pnpm run test:output -- --filter release-age-root-scope
fixtures/repos/version-conflict/hermex.config.ts — resolved, as the loader sees it
{
"releaseAge": {
"cacheDisabled": true
},
"rules": {
"release-age": [
{
"severity": "error",
"patterns": [
"react"
],
"scope": "root"
}
]
},
"output": {
"components": false,
"patterns": false,
"versus": false
}
}
stdout.txthermex v<version>
- Parsing lockfile...
✔ Found pnpm lockfile (supports: v5, v6, v9) - 2 packages
✔ Found 3 files
✔ Analysis complete! Analyzed 3/3 files
✔ Release age fetched
📦 Packages
┌───────────────────────┬───────────┬──────────────────────────────────────────────────┐
│ Package │ Installed │ Target │
├───────────────────────┼───────────┼──────────────────────────────────────────────────┤
│ react │ 18.3.1 │ 🔴 major 19.1.0 (340 days overdue) │
├───────────────────────┼───────────┼──────────────────────────────────────────────────┤
│ @hermex/legacy-widget │ 1.0.0 │ 🟡 major 2.1.0 (240 days overdue) [not enforced] │
└───────────────────────┴───────────┴──────────────────────────────────────────────────┘
Notes:
🔵 react → 2 versions installed (bundle impact): 17.0.2, 18.3.1 → 1 nested copy overdue, not enforced but recommended to resolve
1 error, 1 warning
🔴 Not compliant
1 mandatory violation found
stderr.txt