Hermex Output Review

← all cases

comply-all-rule-types-json

changed

Asserts — The machine-readable shape of every rule type: fieldPath and actualValue on package-field hits, maxSizeBytes/oversizeFile on max-file-size, installedRange/requiredRange on require-engine-version, matchedFile on codeowners, packageName/worstLevel/scope on release-age. Also where the #95 fix is visible — the two codeowners entries now differ by reason (‘unowned’ vs ‘wrong-owner’), not just matchedFile.

Ran hermex comply --format json in fixtures/repos/all-rule-types → exit 1, as asserted

Config fixtures/repos/all-rule-types/hermex.config.ts · Fixture fixtures/repos/all-rule-types (overview) · Case comply-all-rule-types-json (dossier)

Registry offline, served from fixtures/registry/timelines.ts — no network

Reproduce locally: pnpm run test:output -- --filter comply-all-rule-types-json

Config

fixtures/repos/all-rule-types/hermex.config.ts — resolved, as the loader sees it

{
  "includes": [
    "src/**/*.{tsx,jsx,ts,js}"
  ],
  "releaseAge": {
    "cacheDisabled": true
  },
  "rules": {
    "no-outdated-packages": [
      {
        "severity": "error",
        "patterns": [
          "react"
        ]
      }
    ],
    "no-deprecated-packages": [
      {
        "severity": "warn",
        "patterns": [
          "moment"
        ]
      }
    ],
    "no-files": [
      {
        "severity": "error",
        "patterns": [
          "jest.config.*",
          ".babelrc"
        ],
        "message": "Use vitest + Vite"
      }
    ],
    "require-files": [
      {
        "severity": "error",
        "patterns": [
          ".nvmrc"
        ]
      }
    ],
    "max-file-size": [
      {
        "severity": "warn",
        "patterns": [
          "assets/**/*.svg"
        ],
        "maxSize": "1kb",
        "message": "Compress it or serve it from the CDN"
      }
    ],
    "no-packages": [
      {
        "severity": "error",
        "patterns": [
          "moment"
        ],
        "message": "Use date-fns or dayjs"
      }
    ],
    "require-packages": [
      {
        "severity": "error",
        "patterns": [
          "typescript"
        ],
        "message": "TypeScript is required"
      }
    ],
    "require-scripts": [
      {
        "severity": "error",
        "patterns": [
          "build",
          "test"
        ],
        "message": "Required npm scripts"
      }
    ],
    "require-package-fields": [
      {
        "severity": "warn",
        "patterns": [
          "license"
        ]
      }
    ],
    "no-package-fields": [
      {
        "severity": "warn",
        "patterns": [
          "publishConfig.registry"
        ],
        "message": "Publish to the public registry"
      }
    ],
    "require-engine-version": {
      "severity": "error",
      "range": ">=20",
      "message": "Minimum Node 20 required"
    },
    "require-codeowners": {
      "severity": "info",
      "requiredOwners": [
        "@org/platform"
      ],
      "message": "Every file needs a platform owner"
    }
  },
  "output": {
    "components": false,
    "patterns": false,
    "versus": false
  }
}

Diff against the target branch

Diffs are unified format: - is the target branch, + is this run. @@ -12,7 +12,9 @@ is a hunk header — unchanged lines were skipped, and the hunk below covers 7 lines from line 12 of the target branch and 9 lines from line 12 of this run.

--- target/stdout.json
+++ current/stdout.json
@@ -22,28 +22,28 @@
       "allVersions": [
         "18.3.1"
       ],
-      "releaseAge": {
-        "installedVersion": "18.3.1",
-        "upgrades": [
+      "releases": {
+        "resolved": [
           {
-            "version": "19.1.0",
-            "releasedDaysAgo": 10,
-            "breachReleasedDaysAgo": 400,
-            "semverBump": "major",
-            "level": "major_overdue",
-            "thresholdDays": 60,
-            "isLatest": true
+            "version": "18.3.1",
+            "isRoot": true,
+            "newer": [
+              {
+                "version": "19.0.0",
+                "releasedDaysAgo": 400,
+                "semverBump": "major"
+              },
+              {
+                "version": "19.1.0",
+                "releasedDaysAgo": 10,
+                "semverBump": "major",
+                "isLatest": true
+              }
+            ]
           }
         ],
-        "worstLevel": "major_overdue",
         "latestVersion": "19.1.0",
-        "latestReleasedDaysAgo": 10,
-        "minCompliantVersion": "19.1.0",
-        "minCompliantReleasedDaysAgo": 10,
-        "minCompliantInWindow": true,
-        "minCompliantBump": "major",
-        "severity": "error",
-        "scope": "root"
+        "latestReleasedDaysAgo": 10
       }
     },
     {
@@ -62,27 +62,23 @@
         "2.29.4"
       ],
       "deprecated": "Moment is in maintenance mode — prefer date-fns or dayjs",
-      "releaseAge": {
-        "installedVersion": "2.29.4",
-        "upgrades": [
+      "releases": {
+        "resolved": [
           {
-            "version": "2.30.1",
-            "releasedDaysAgo": 500,
-            "breachReleasedDaysAgo": 500,
-            "semverBump": "minor",
-            "level": "minor_overdue",
-            "thresholdDays": 45,
-            "isLatest": true
+            "version": "2.29.4",
+            "isRoot": true,
+            "newer": [
+              {
+                "version": "2.30.1",
+                "releasedDaysAgo": 500,
+                "semverBump": "minor",
+                "isLatest": true
+              }
+            ]
           }
         ],
-        "worstLevel": "minor_overdue",
         "latestVersion": "2.30.1",
-        "latestReleasedDaysAgo": 500,
-        "minCompliantVersion": "2.30.1",
-        "minCompliantReleasedDaysAgo": 500,
-        "minCompliantInWindow": false,
-        "severity": "warn",
-        "scope": "root"
+        "latestReleasedDaysAgo": 500
       }
     }
   ],
@@ -155,8 +151,9 @@
         "react"
       ],
       "packageName": "react",
-      "installedVersion": "18.3.1",
-      "worstLevel": "major_overdue",
+      "measuredVersion": "18.3.1",
+      "overdueTier": "major",
+      "daysOverdue": 340,
       "scope": "root"
     },
     {
@@ -196,8 +193,9 @@
         "**"
       ],
       "packageName": "moment",
-      "installedVersion": "2.29.4",
-      "worstLevel": "minor_overdue",
+      "measuredVersion": "2.29.4",
+      "overdueTier": "minor",
+      "daysOverdue": 455,
       "scope": "root"
     },
     {

Full output

stdout.json
{
  "version": "<version>",
  "summary": {
    "filesAnalyzed": 3,
    "totalImports": 3,
    "totalComponents": 1,
    "totalUsagePatterns": 5
  },
  "packages": [
    {
      "packageName": "react",
      "version": "18.3.1",
      "rootVersion": "18.3.1",
      "declaredIn": [
        "dependencies"
      ],
      "componentCount": 1,
      "usageCount": 1,
      "importingFileCount": 3,
      "percentage": 100,
      "hasVersionConflict": false,
      "allVersions": [
        "18.3.1"
      ],
      "releases": {
        "resolved": [
          {
            "version": "18.3.1",
            "isRoot": true,
            "newer": [
              {
                "version": "19.0.0",
                "releasedDaysAgo": 400,
                "semverBump": "major"
              },
              {
                "version": "19.1.0",
                "releasedDaysAgo": 10,
                "semverBump": "major",
                "isLatest": true
              }
            ]
          }
        ],
        "latestVersion": "19.1.0",
        "latestReleasedDaysAgo": 10
      }
    },
    {
      "packageName": "moment",
      "version": "2.29.4",
      "rootVersion": "2.29.4",
      "declaredIn": [
        "dependencies"
      ],
      "componentCount": 0,
      "usageCount": 0,
      "importingFileCount": 0,
      "percentage": 0,
      "hasVersionConflict": false,
      "allVersions": [
        "2.29.4"
      ],
      "deprecated": "Moment is in maintenance mode — prefer date-fns or dayjs",
      "releases": {
        "resolved": [
          {
            "version": "2.29.4",
            "isRoot": true,
            "newer": [
              {
                "version": "2.30.1",
                "releasedDaysAgo": 500,
                "semverBump": "minor",
                "isLatest": true
              }
            ]
          }
        ],
        "latestVersion": "2.30.1",
        "latestReleasedDaysAgo": 500
      }
    }
  ],
  "ruleViolations": [
    {
      "ruleId": "no-packages",
      "severity": "error",
      "patterns": [
        "moment"
      ],
      "message": "Use date-fns or dayjs",
      "packageName": "moment"
    },
    {
      "ruleId": "require-packages",
      "severity": "error",
      "patterns": [
        "typescript"
      ],
      "message": "TypeScript is required"
    },
    {
      "ruleId": "no-files",
      "severity": "error",
      "patterns": [
        "jest.config.*",
        ".babelrc"
      ],
      "message": "Use vitest + Vite",
      "matchedFile": "jest.config.js"
    },
    {
      "ruleId": "no-files",
      "severity": "error",
      "patterns": [
        "jest.config.*",
        ".babelrc"
      ],
      "message": "Use vitest + Vite",
      "matchedFile": ".babelrc"
    },
    {
      "ruleId": "require-files",
      "severity": "error",
      "patterns": [
        ".nvmrc"
      ]
    },
    {
      "ruleId": "require-scripts",
      "severity": "error",
      "patterns": [
        "build",
        "test"
      ],
      "message": "Required npm scripts"
    },
    {
      "ruleId": "require-engine-version",
      "severity": "error",
      "patterns": [],
      "message": "Minimum Node 20 required",
      "installedRange": ">=16",
      "requiredRange": ">=20"
    },
    {
      "ruleId": "no-outdated-packages",
      "severity": "error",
      "patterns": [
        "react"
      ],
      "packageName": "react",
      "measuredVersion": "18.3.1",
      "overdueTier": "major",
      "daysOverdue": 340,
      "scope": "root"
    },
    {
      "ruleId": "max-file-size",
      "severity": "warn",
      "patterns": [
        "assets/**/*.svg"
      ],
      "message": "Compress it or serve it from the CDN",
      "maxSizeBytes": 1024,
      "oversizeFile": {
        "file": "assets/logo.svg",
        "sizeBytes": 1410
      }
    },
    {
      "ruleId": "require-package-fields",
      "severity": "warn",
      "patterns": [
        "license"
      ]
    },
    {
      "ruleId": "no-package-fields",
      "severity": "warn",
      "patterns": [
        "publishConfig.registry"
      ],
      "message": "Publish to the public registry",
      "fieldPath": "publishConfig.registry",
      "actualValue": "https://npm.internal.example.com"
    },
    {
      "ruleId": "no-outdated-packages",
      "severity": "warn",
      "patterns": [
        "**"
      ],
      "packageName": "moment",
      "measuredVersion": "2.29.4",
      "overdueTier": "minor",
      "daysOverdue": 455,
      "scope": "root"
    },
    {
      "ruleId": "no-deprecated-packages",
      "severity": "warn",
      "patterns": [
        "moment"
      ],
      "packageName": "moment",
      "deprecated": "Moment is in maintenance mode — prefer date-fns or dayjs"
    },
    {
      "ruleId": "require-codeowners",
      "severity": "info",
      "patterns": [
        "CODEOWNERS"
      ],
      "message": "Every file needs a platform owner",
      "reason": "unowned",
      "matchedFile": "src/orphan.tsx"
    },
    {
      "ruleId": "require-codeowners",
      "severity": "info",
      "patterns": [
        "CODEOWNERS"
      ],
      "message": "Every file needs a platform owner",
      "reason": "wrong-owner",
      "matchedFile": "src/legacy.tsx"
    }
  ],
  "compliance": {
    "status": "non-compliant",
    "compliant": false,
    "counts": {
      "errorRuleViolations": 8,
      "warningRuleViolations": 5
    }
  }
}
stderr.txt
hermex v<version>
- Parsing lockfile...
✔ Found pnpm lockfile (supports: v5, v6, v9) - 2 packages
✔ Found 3 files
✔ Analysis complete! Analyzed 3/3 files
✔ Release age fetched