Skip to content

v0.3.3 — KEEP patterns for payment, realtime, notifications, analytics

Choose a tag to compare

@FlorianBruniaux FlorianBruniaux released this 21 Apr 17:35
· 22 commits to main since this release

Fix

Integration SDKs with a singleton init pattern were incorrectly flagged as INVESTIGATE. Added KEEP patterns for:

Payment: stripe, @stripe/*

Realtime/WebSocket: pusher, pusher-js, ably, socket.io, socket.io-client, ws

Notifications/Messaging: @knocklabs/*, @novu/*, twilio

Third-party API clients: @notionhq/*, @airtable/*, airtable

Analytics/Monitoring: @sentry/*, posthog-js, posthog-node, @posthog/*, @segment/*, mixpanel

These packages are initialized once (one server instance, one client connection, one provider). Low symbol count is expected — not a smell.

Update

npm install -g @florianbruniaux/dep-scope@latest