v0.3.3 — KEEP patterns for payment, realtime, notifications, analytics
Fix
Integration SDKs with a singleton init pattern were incorrectly flagged as INVESTIGATE. Added KEEP patterns for:
Payment: stripe, @stripe/*
Realtime/WebSocket: pusher, pusher-js, ably, socket.io, socket.io-client, ws
Notifications/Messaging: @knocklabs/*, @novu/*, twilio
Third-party API clients: @notionhq/*, @airtable/*, airtable
Analytics/Monitoring: @sentry/*, posthog-js, posthog-node, @posthog/*, @segment/*, mixpanel
These packages are initialized once (one server instance, one client connection, one provider). Low symbol count is expected — not a smell.
Update
npm install -g @florianbruniaux/dep-scope@latest