chore: update config paths and clean up imports

Update references to relocated config files and remove unused imports

Author: jdalton

.config/eslint.config.mjs

@@ -26,7 +26,7 @@ const nodeGlobalsConfig = Object.fromEntries(
   Object.entries(globals.node).map(([k]) => [k, 'readonly']),
 )
 
-const biomeConfigPath = path.join(rootPath, 'biome.json')
+const biomeConfigPath = path.join(rootPath, '.config', 'biome.json')
 const biomeConfig = require(biomeConfigPath)
 const biomeIgnores = {
   name: `Imported biome.json ignore patterns`,

scripts/build.mjs

@@ -94,7 +94,7 @@ async function buildTypes(options = {}) {
   }
 
   commands.push({
-    args: ['exec', 'tsgo', '--project', 'tsconfig.dts.json'],
+    args: ['exec', 'tsgo', '--project', '.config/tsconfig.dts.json'],
     command: 'pnpm',
   })
 

scripts/cover.mjs

@@ -3,7 +3,7 @@
  * Collects both code coverage and type coverage.
  *
  * Usage:
- *   node scripts/cover.mjs [--code-only|--type-only|--percent]
+ *   node scripts/cover.mjs [--code-only|--type-only|--percent|--summary]
  */
 
 import { parseArgs } from 'node:util'
@@ -18,13 +18,14 @@ async function main() {
       options: {
         'code-only': { type: 'boolean', default: false },
         percent: { type: 'boolean', default: false },
+        summary: { type: 'boolean', default: false },
         'type-only': { type: 'boolean', default: false },
       },
       strict: false,
     })
 
-    if (values.percent) {
-      // Just get coverage percentage
+    if (values.percent || values.summary) {
+      // Display coverage summary
       const exitCode = await runSequence([
         { args: ['scripts/coverage-percent.mjs'], command: 'node' },
       ])

scripts/lint.mjs

@@ -35,7 +35,6 @@ const CONFIG_PATTERNS = [
   'pnpm-lock.yaml',
   'tsconfig*.json',
   'eslint.config.*',
-  'biome.json',
 ]
 
 /**

scripts/utils/get-type-coverage.mjs

@@ -4,12 +4,12 @@ import { spawn } from '@socketsecurity/registry/lib/spawn'
 
 /**
  * Executes the type-coverage command and extracts the percentage from its output.
- * This runs 'pnpm run coverage:type' which internally executes the type-coverage tool.
+ * This runs 'pnpm exec type-coverage' which executes the type-coverage tool.
  * @returns {Promise<number|null>} The type coverage percentage as a float, or null if not found.
  */
 export async function getTypeCoverage() {
   // Run the type-coverage command and capture its output.
-  const result = await spawn('pnpm', ['run', 'coverage:type'], {
+  const result = await spawn('pnpm', ['exec', 'type-coverage'], {
     stdio: 'pipe',
     // Use shell on Windows for proper command execution.
     shell: constants.WIN32,

src/package-url.ts

@@ -267,7 +267,7 @@ class PackageURL {
       )
     }
 
-    let parsed
+    let parsed: unknown
     try {
       parsed = JSON.parse(json)
     } catch (e) {
@@ -282,15 +282,18 @@ class PackageURL {
       throw new Error('JSON must parse to an object')
     }
 
+    // Cast to record type for safe property access
+    const parsedRecord = parsed as Record<string, unknown>
+
     // Create a safe object without prototype chain to prevent prototype pollution.
     const safeObject: PackageURLObject = {
       __proto__: null,
-      type: parsed.type,
-      namespace: parsed.namespace,
-      name: parsed.name,
-      version: parsed.version,
-      qualifiers: parsed.qualifiers,
-      subpath: parsed.subpath,
+      type: parsedRecord['type'] as string | undefined,
+      namespace: parsedRecord['namespace'] as string | undefined,
+      name: parsedRecord['name'] as string | undefined,
+      version: parsedRecord['version'] as string | undefined,
+      qualifiers: parsedRecord['qualifiers'] as Record<string, string> | undefined,
+      subpath: parsedRecord['subpath'] as string | undefined,
     } as PackageURLObject
 
     return PackageURL.fromObject(safeObject)

test/integration.test.mts

@@ -18,7 +18,7 @@ describe('Integration tests', () => {
     const { pkgPath } = await isolatePackage(packagePath)
 
     // Test that we can import the package
-    const { PackageURL } = await import(`${pkgPath}/dist/package-url.js`)
+    const { PackageURL } = await import(`${pkgPath}/dist/index.js`)
     expect(PackageURL).toBeDefined()
     expect(typeof PackageURL).toBe('function')
 
@@ -46,8 +46,7 @@ describe('Integration tests', () => {
   it('should load UrlConverter and work correctly', async () => {
     const { pkgPath } = await isolatePackage(packagePath)
 
-    const { UrlConverter } = await import(`${pkgPath}/dist/url-converter.js`)
-    const { PackageURL } = await import(`${pkgPath}/dist/package-url.js`)
+    const { PackageURL, UrlConverter } = await import(`${pkgPath}/dist/index.js`)
 
     expect(UrlConverter).toBeDefined()
     expect(typeof UrlConverter.toRepositoryUrl).toBe('function')
@@ -64,9 +63,7 @@ describe('Integration tests', () => {
   it('should have all entry points working together', async () => {
     const { pkgPath } = await isolatePackage(packagePath)
 
-    const { PackageURL } = await import(`${pkgPath}/dist/package-url.js`)
-    const { PackageURLBuilder } = await import(`${pkgPath}/dist/index.js`)
-    const { UrlConverter } = await import(`${pkgPath}/dist/url-converter.js`)
+    const { PackageURL, PackageURLBuilder, UrlConverter } = await import(`${pkgPath}/dist/index.js`)
 
     // Build a purl
     const purl = PackageURLBuilder.create()