feat(deno): migrate broad-spectrum npm → Deno (standards#253)

[hyperpolymath]

Summary

Class B (npm-wrapper via Deno) migration of broad-spectrum/ sub-tree.

• Deletes broad-spectrum/package.json (stub: rescript + @rescript/core + gentype devDeps; scripts wrapping rescript)
• Updates broad-spectrum/deno.json to add wrapped build/clean/watch tasks: deno run -A --node-modules-dir=auto npm:rescript <args>
• Appends npm-avoidant lock-file patterns to root .gitignore

Triage note: deno.json already exists and had Deno-native audit/test/dev/fmt/lint tasks. The build/clean/watch lifecycle previously living in package.json is now wrapped via Deno's npm: specifier so functionality survives the delete. No gentype task was bare-referenced anywhere.

Scope: only broad-spectrum/ + root .gitignore. No lock files were present to remove.

Refs: standards#253 STEP 3 (smallest-first batch).

Test plan

• CI green on default checks
• deno task -c broad-spectrum/deno.json build resolves rescript via npm: specifier (post-merge spot-check optional)

[github-actions]

🔍 Hypatia Security Scan

Findings: 121 issues detected

Severity	Count
🔴 Critical	29
🟠 High	40
🟡 Medium	52

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in guix-nix-policy.yml",
    "type": "missing_timeout_minutes",
    "file": "guix-nix-policy.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence