Skip to content
Back to skills

Xberg Typescript Toolchain

ASecurity

Work on Xberg TypeScript or JavaScript packages with the repository's actual poly, pnpm, npm, Vitest, napi-rs, wasm-pack, and integration-package boundaries. Load for TS/JS tooling or package changes, not Rust-only binding generation.

  • 9,365 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 3, 2026
developmentjavascripttypescriptrustjavanodetestingapi

Works with

  • api

Security analysis

A100/100

Scanned October 3, 2026

npx -y skills add xberg-io/xberg --skill xberg-typescript-toolchain --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Xberg Typescript Toolchain?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Xberg Typescript Toolchain
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/xberg-io-xberg-typescript-toolchain/badge)](https://www.skillsdirectory.com/skills/xberg-io-xberg-typescript-toolchain)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: xberg-typescript-toolchain
description: >-
  Work on Xberg TypeScript or JavaScript packages with the repository's actual poly, pnpm, npm, Vitest, napi-rs,
  wasm-pack, and integration-package boundaries. Load for TS/JS tooling or package changes, not Rust-only binding
  generation.
---

# Xberg TypeScript toolchain

These repository-specific facts override generic TypeScript conventions where they differ.

- Lint and format with `poly lint .` and `poly fmt .`. Poly embeds oxlint and oxfmt; do not install or invoke oxlint,
  oxfmt, Prettier, ESLint, or Biome directly, and do not add per-package lint scripts.
- Root `tsconfig.json` enables strict checking options and is a project-reference root for `e2e/node` and `e2e/wasm`.
  Confirm that the package being changed is included before treating a root typecheck as evidence.
- Testing uses Vitest with `@vitest/coverage-v8`. No coverage threshold is enforced unless one is added to current
  configuration.
- No runtime schema-validator dependency is guaranteed. Use existing boundary guards or propose a dependency
  explicitly rather than assuming Zod is available.
- The pnpm workspace uses the root lockfile. Packages under `integrations/node/` are outside that workspace and use
  their own npm lockfiles. Determine ownership before installing or updating dependencies.
- `integrations/node/{langchain,llamaindex}-xberg` use tsup. The Node binding is built by napi-rs and the WASM binding
  by wasm-pack; do not add an application bundler to either binding.
- Prefer `workspace:*` for new dependencies between packages that are actually in the pnpm workspace.
- JavaScript dependency auditing is manual unless a current workflow says otherwise; do not claim an audit ran merely
  because Rust or poly checks passed.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.