From b1e5ad9d48766d6a059dbcf8fb3d2966bedc8deb Mon Sep 17 00:00:00 2001 From: windka Date: Thu, 20 Aug 2026 11:28:14 +0200 Subject: [PATCH 1/2] chore: run the standard from a local devDependency `nrstd audit` was only reachable through `npx github:windkh/node-red-standards`, which refetches on every call and needs network. Declaring it as a devDependency makes `npm run standards:audit` work offline against the installed copy, and lets dependabot keep the reference moving -- it already does this for the repos that had added it by hand. The specifier is deliberately the moving `github:windkh/node-red-standards` and not a pinned commit: node-red-contrib-ntrip pinned a commit tarball and silently stopped receiving the standard for three releases while still reporting a clean audit against the frozen copy. node-red-standards 0.5.0 now treats any other specifier for itself as drift and reports `unpin (was frozen at a commit)`. Audit is 16/17 here until the open ci/coverage-report-artifact PR lands; it adds the c8 lcov reporter, so that gap is deliberately left to it rather than duplicated. Verified: lint, format:check and 436 tests pass; lockfile resolves 0.5.0. Co-Authored-By: Claude Opus 5 --- package-lock.json | 18 ++++++++++++++++++ package.json | 5 ++++- 2 files changed, 22 insertions(+), 1 deletion(-) diff --git a/package-lock.json b/package-lock.json index f77b209..62ed2a6 100644 --- a/package-lock.json +++ b/package-lock.json @@ -20,6 +20,7 @@ "globals": "^17.0.0", "node-red": "^5.0.1", "node-red-node-test-helper": "^0.3.4", + "node-red-standards": "github:windkh/node-red-standards", "prettier": "^3.0.0" }, "engines": { @@ -3819,6 +3820,18 @@ "node": ">=14" } }, + "node_modules/node-red-standards": { + "version": "0.5.0", + "resolved": "git+ssh://git@github.com/windkh/node-red-standards.git#e4bd2440264cea0c42ee6de10ebd7f62a179629d", + "dev": true, + "license": "MIT", + "bin": { + "nrstd": "bin/nrstd.mjs" + }, + "engines": { + "node": ">=20.0.0" + } + }, "node_modules/node-watch": { "version": "0.7.4", "resolved": "https://registry.npmjs.org/node-watch/-/node-watch-0.7.4.tgz", @@ -9936,6 +9949,11 @@ "supertest": "^7.1.4" } }, + "node-red-standards": { + "version": "git+ssh://git@github.com/windkh/node-red-standards.git#e4bd2440264cea0c42ee6de10ebd7f62a179629d", + "dev": true, + "from": "node-red-standards@github:windkh/node-red-standards" + }, "node-watch": { "version": "0.7.4", "resolved": "https://registry.npmjs.org/node-watch/-/node-watch-0.7.4.tgz", diff --git a/package.json b/package.json index 8c92397..b25b86d 100644 --- a/package.json +++ b/package.json @@ -20,7 +20,9 @@ "format:check": "prettier --check .", "test": "node --test --test-force-exit --test-timeout=30000 --test-concurrency=1", "coverage": "c8 npm test", - "coverage:check": "c8 --check-coverage npm test" + "coverage:check": "c8 --check-coverage npm test", + "standards:audit": "nrstd audit", + "standards:sync": "nrstd sync" }, "c8": { "reporter": [ @@ -67,6 +69,7 @@ "globals": "^17.0.0", "node-red": "^5.0.1", "node-red-node-test-helper": "^0.3.4", + "node-red-standards": "github:windkh/node-red-standards", "prettier": "^3.0.0" } } From 47315915213308aee54a815b2d696700a69a608f Mon Sep 17 00:00:00 2001 From: windka Date: Thu, 20 Aug 2026 13:31:14 +0200 Subject: [PATCH 2/2] chore: point the lockfile at node-red-standards 0.5.1 0.5.1 adds one audit check: c8.lines must be stated explicitly. c8 defaults it to 90 rather than 0, so an omitted floor is a coverage gate nobody chose. This repo already declares one, so the check passes as-is. Refreshed with `npm update` rather than `npm install`, which does not re-resolve a git dependency whose existing entry already satisfies the specifier -- the mechanism that had kept this reference stale. Co-Authored-By: Claude Opus 5 --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 62ed2a6..f7ec3e3 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3821,8 +3821,8 @@ } }, "node_modules/node-red-standards": { - "version": "0.5.0", - "resolved": "git+ssh://git@github.com/windkh/node-red-standards.git#e4bd2440264cea0c42ee6de10ebd7f62a179629d", + "version": "0.5.1", + "resolved": "git+ssh://git@github.com/windkh/node-red-standards.git#f3982d0a9447df04a6074bf654aca39e174a5fc3", "dev": true, "license": "MIT", "bin": { @@ -9950,7 +9950,7 @@ } }, "node-red-standards": { - "version": "git+ssh://git@github.com/windkh/node-red-standards.git#e4bd2440264cea0c42ee6de10ebd7f62a179629d", + "version": "git+ssh://git@github.com/windkh/node-red-standards.git#f3982d0a9447df04a6074bf654aca39e174a5fc3", "dev": true, "from": "node-red-standards@github:windkh/node-red-standards" },