coreui / coreui-pro / 33621197261

93%

main: 94%

push

github

chore: declare package exports and side effects, normalize js/src headers (#1045)

package.json gains an exports map covering every documented import path
(the ESM/UMD bundles for the bare specifier, js/dist plugins with and
without extension, js/src sources with the .js-to-dist rewrite, dist/css,
scss, package.json) and a sideEffects list limited to the component
entry files, so bundlers can tree-shake js/src/util and js/src/dom on
per-module imports.

js/src headers: index.ts carried a contradictory "Licensed under MIT"
line pointing at the PRO license and gets the PRO header; accordion,
number-input, otp-input, password-input and password-strength ship in
the free edition and get the free MIT header (accordion and
password-strength had the contradictory line, otp-input named itself
password-input.js); offcanvas linked the stale twbs blob/master URL;
chip-input claimed a Bootstrap chip-input.js origin that never existed;
password-strength gains the provenance lines it was missing — its
built-in scorer is Bootstrap strength.ts (same eight weighted rules,
threshold ladder and masked event payload) extended with an async
scorer, userInputs and a segmented meter.
index.ts export order restored to alphabetical (DateTimeInput before
DateTimePicker, NumberInput before OTPInput).

Workspace audit v6-js-pre-alpha-audit-2026-08 §8.

4750 of 5351 branches covered (88.77%)

Branch coverage included in aggregate %.

9049 of 9474 relevant lines covered (95.51%)

388.59 hits per line