feat(deno): migrate accessibility-everywhere tools/ (7/8 manifests, standards#253 longtail)#49
Merged
Merged
Conversation
…fests; browser-extension Class C deferred, standards#253 longtail) Workspace-style migration covering 7 of 8 npm manifests. The eighth (tools/browser-extension/package.json) is Class C — browser-extension packaging requires the npm-published `archiver` library at build time and the extension itself loads `axe.min.js` from a Node-resolved path. Same Class C pattern as VSCode extensions / Office add-ins (host-required npm scaffolding). ## Migrated ### Root (workspace coordination) - /deno.json: extend the existing minimal config with `workspace` field (6 ReScript tool members) + `tasks` orchestrating setup/build/test/docker. browser-extension task documents the Class C deferral instead of attempting orchestration. ### tools/safe-dom/ (B) - ReScript core library wrapping the DOM with safer types. - Tasks: build/clean/dev via `deno run -A --node-modules-dir=auto npm:rescript@^12.0.0`. - Imports: rescript@^12 + @rescript/core@^1.6. ### tools/cli/ (B) - ReScript CLI using commander + chalk + ora + cli-table3 + fs-extra. - All deps mapped via npm: specifiers. ### tools/github-action/ (B) - ReScript GitHub Action using @actions/core + @actions/github. - Standard GH Actions toolkit, npm: specifiers. ### tools/monitoring-api/ (B) - ReScript Express server with helmet/cors/rate-limit/compression/joi. - 9 npm: specifiers; serve task uses `deno run --allow-net --allow-read --allow-env`. ### tools/stale/packages/core/ (B) - ReScript core for accessibility-everywhere-stale subsystem (ArangoDB). - Pinned to rescript@^11.1 to preserve the version in package.json (not upgrading mid-migration). - arangojs + dotenv via npm:. ### tools/stale/packages/scanner/ (B) - ReScript accessibility scanner with axe-core + playwright + puppeteer. - Pinned to rescript@^11.1 + axe-core@^4.8 + playwright@^1.40 + puppeteer@^24. ## Deferred (Class C — host-required) - tools/browser-extension/package.json — depends on `archiver` (npm-only zip lib) for chrome/firefox packaging; `axe.min.js` is copy-source-pathed from node_modules at build time. Class C pattern (host requires npm). Not migrated; tracked as Class C carve-out candidate for hypatia rule extension (per-repo follow-up). ## Test plan - [ ] `deno task build` builds cli + safe-dom + scanner via rescript - [ ] `deno task build:browser-extension` emits documentation message - [ ] tools/browser-extension/package.json scripts unchanged Per per-repo follow-up tracker for standards#253 (campaign closed 2026-05-31, longtail tracked in project_estate_npm_to_deno_2026_05_28.md). Refs hyperpolymath/standards#253. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
hyperpolymath
enabled auto-merge (squash)
May 31, 2026 07:29
🔍 Hypatia Security ScanFindings: 106 issues detected
View findings[
{
"reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
"type": "unpinned_action",
"file": "governance.yml",
"action": "pin_sha",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in boj-build.yml",
"type": "missing_timeout_minutes",
"file": "boj-build.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in casket-pages.yml",
"type": "missing_timeout_minutes",
"file": "casket-pages.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in casket-pages.yml",
"type": "missing_timeout_minutes",
"file": "casket-pages.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in ci.yml",
"type": "missing_timeout_minutes",
"file": "ci.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in ci.yml",
"type": "missing_timeout_minutes",
"file": "ci.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in ci.yml",
"type": "missing_timeout_minutes",
"file": "ci.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in ci.yml",
"type": "missing_timeout_minutes",
"file": "ci.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in ci.yml",
"type": "missing_timeout_minutes",
"file": "ci.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in ci.yml",
"type": "missing_timeout_minutes",
"file": "ci.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
}
]Powered by Hypatia Neurosymbolic CI/CD Intelligence |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Workspace-style migration covering 7 of 8 npm manifests. The eighth (
tools/browser-extension/package.json) is Class C — browser-extension packaging requires the npm-publishedarchiverlibrary at build time. Same Class C pattern as VSCode extensions / Office add-ins.Migrated
/package.json/deno.jsonworkspacefield with 6 ReScript tools; tasks orchestrate setup/build/test/dockertools/safe-dom/package.jsontools/safe-dom/deno.jsontools/cli/package.jsontools/cli/deno.jsontools/github-action/package.jsontools/github-action/deno.jsontools/monitoring-api/package.jsontools/monitoring-api/deno.jsontools/stale/packages/core/package.jsontools/stale/packages/core/deno.jsontools/stale/packages/scanner/package.jsontools/stale/packages/scanner/deno.jsonAll Class B tools use
deno run -A --node-modules-dir=auto npm:rescript@^<version>for build/clean/dev (rescript's install lifecycle requires resolvable node_modules).Deferred (Class C — host-required)
tools/browser-extension/package.json— depends onarchiver(npm-only zip lib) for Chrome/Firefox packaging;axe.min.jsis copy-source-pathed fromnode_modulesat build time. Class C pattern (host-required npm scaffolding). Tracked as carve-out candidate for hypatia rule extension (per-repo follow-up).The root
build:browser-extensiontask emits a documentation message instead of orchestrating, sodeno task build:browser-extensiondoes not silently fail.Test plan
deno task buildchains cli + safe-dom + scanner buildsdeno task buildproduces equivalent .mjs/.bs.js output to prior barerescriptdeno task setupinvokes the arangodb setup scriptPer per-repo follow-up tracker for standards#253 (campaign closed 2026-05-31, longtail tracked in
project_estate_npm_to_deno_2026_05_28.md).Refs hyperpolymath/standards#253.
🤖 Generated with Claude Code