@aahoughton/oav-core

HTTP-aware OpenAPI request/response validator with a JSON Schema codegen compiler. Zero runtime dependencies; install @aahoughton/oav for the batteries-included experience (YAML readers + CLI).

Supply chain provenance

Status for the latest visible version.

Maintainers

Keywords

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
source-diff	net-exec-file:dist/chunk-TR7B53OF.cjs	AI (source-diff): Code generation for JSON Schema validation; URL strings are vocabulary identifiers, not network calls. Stable pattern for this package.	ai	2026/05/27
source-diff	net-exec-file:dist/chunk-FFJS7MUM.js	AI (source-diff): ESM equivalent of the same codegen pattern; false positive for this schema-compiler package.	ai	2026/05/27
source-diff	net-exec-file:dist/chunk-MMIYWQBD.cjs	AI (source-diff): Code generation for JSON Schema validation; ctx.gen.line emits validator code strings, not dynamic eval of remote content.	ai	2026/05/10
source-diff	net-exec-file:dist/chunk-YHW6KGRO.js	AI (source-diff): ESM equivalent of the same codegen pattern; no actual network fetch or eval of remote code.	ai	2026/05/10
source-diff	net-exec-file:dist/chunk-A57DO7ZQ.cjs	AI (source-diff): Code generation is the library's documented core feature; ctx.gen.line() emits validator code, not malware.	ai	2026/05/10
source-diff	net-exec-file:dist/chunk-AYRRKP4K.js	AI (source-diff): Same codegen pattern in ESM chunk; stable false positive for this JSON Schema compiler package.	ai	2026/05/10
install-scripts	install-script:preinstall	AI (install-scripts): Standard pnpm-only enforcement guard; only fires inside the monorepo workspace, harmless to downstream consumers.	ai	2026/04/30

Version	Deps	Published
2.2.0	0 / 9	2026-05-19
2.1.0	0 / 9	2026-05-04
2.0.0	0 / 9	2026-05-02
1.1.2	0 / 9	2026-04-27
1.1.1	0 / 9	2026-04-27
1.1.0	0 / 9	2026-04-26
1.0.0	0 / 9	2026-04-26