wt
e2b4dbdb76
Changes: Add an isolated public transport integration with finite byte, depth, element and attribute budgets; validate complete text XML with pinned saxes before real JXT parsing/import. Add adversarial and boundary fixtures, terminal cleanup tests, dependency notices and a proposed parser ADR. Validation: Fresh-cache npm ci and npm test passed all 55 tests with Node 24.21.0/npm 11.19.0. Reproduced three stock parser failures, checked ten exact dependency licenses/integrities and 340 unchanged Stanza files; make check passed 72 tooling tests. Scope and whitespace inspected. Browser runtime, live WSS and interoperability were not tested. Task: S00-018 Agent: auto-protocol-89fe6563092c Role: protocol Action: claim Status: review Task title: Validate bounded standalone XML ingress for the XMPP candidate
17 lines
799 B
Markdown
17 lines
799 B
Markdown
# Exact dependency license inventory
|
|
|
|
Inspected 2026-10-15. Node 24.21.0 / npm 11.19.0. Saxes tarball omits its license text: preserved upstream v6.0.0 LICENSE in licenses/saxes-6.0.0-LICENSE, retrieved via verified HTTPS. Other texts are shipped installed files. No advisory/provenance clearance is claimed.
|
|
|
|
| Package | Version | SPDX | License/notice source |
|
|
| --- | --- | --- | --- |
|
|
| @types/node | 22.20.5 | MIT | LICENSE |
|
|
| @types/punycode | 2.1.4 | MIT | LICENSE |
|
|
| @types/ws | 8.18.2 | MIT | LICENSE |
|
|
| punycode | 2.3.1 | MIT | LICENSE-MIT.txt |
|
|
| saxes | 6.0.0 | ISC | saxes-6.0.0-LICENSE |
|
|
| sdp | 3.2.2 | MIT | LICENSE |
|
|
| stanza | 12.22.1 | MIT | LICENSE.md, NOTICE.md |
|
|
| undici-types | 6.21.0 | MIT | LICENSE |
|
|
| ws | 8.22.0 | MIT | LICENSE |
|
|
| xmlchars | 2.2.0 | MIT | LICENSE |
|