valehasadli/emitrix

Emitrix is a type-safe, async-first in-process event bus library for Node.js and isomorphic environments. It provides structured event envelopes with correlation metadata, configurable error policies, and middleware support for tracing and logging. The system supports various dispatch modes, wildcard subscriptions, and priority-based listener execution, ensuring robust performance under load.

Emitrix is introduced as an async-first, type-safe in-process event bus for Node.js backends (and isomorphic environments like browsers, Deno, and Bun). The library provides typed event maps, event envelopes with correlation/causation metadata, configurable error policies (aggregate or fail-fast), and multiple dispatch modes (sequential or parallel). It features a middleware pipeline for tracing and logging, wildcard subscriptions, delayed listeners, and a \waitFor\ API for promise-based one-shot subscriptions. The package is built with TypeScript 7 targeting ES2022, uses Jest 30 for testing, and maintains zero runtime dependencies.

(repo-wide) · high confidence

The library has been updated to version 2.0.0, shifting to an async-first architecture for its in-process event bus. This release exposes the core Emitter class along with specific error types (EmitError, TimeoutError, AbortError) and a comprehensive set of type definitions (such as DispatchMode, EmitOptions, Middleware, and various listener-related types) from the main entry point, establishing the public API for the new event channeling capabilities.

src · high confidence

The library now provides a new in-process event bus (Emitter) designed for backend use, featuring async-first handlers and structured event envelopes that include identity, correlation, and causation metadata for tracing. Users can subscribe using exact names, prefix wildcards, or catch-all patterns, with support for priority-based ordering, delayed execution, and cancellation via AbortSignal. The bus offers configurable error handling (aggregate vs. fail-fast) and dispatch modes (sequential vs. parallel), along with middleware support for cross-cutting concerns like logging and metrics.

src/lib · high confidence

A new release script (scripts/release.sh) has been added to automate the creation of GitHub releases. When executed, the script reads the version from package.json, creates a git tag, generates release notes from the CHANGELOG, and uses the GitHub CLI to publish the release. This release creation triggers the CI workflow to test and publish the package to npm.

scripts · high confidence

Added comprehensive test coverage for the Emitter event bus; Added load benchmark for event emitter priority handling.

The project's development dependencies have been updated to major new versions: Babel is upgraded to version 8, Jest to version 30, and TypeScript to version 7. These changes require a Node.js runtime of version 20 or higher and may affect the build and test environment due to the significant version jumps in the tooling stack.

(dependencies) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 69 → 70 (+1.6)
• Rubric changed (rubric-2026.08.18 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 99 → 100 (+0.6)
• Architecture 69 → 69 (+0.0)
• Maturity 66 → 66 (+0.0)
• Readiness 65 → 72 (+7.2)
• Security 71 → 80 (+9.1)

• Coverage not included — suite not readable by the collector
• Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
• High CVE: [GHSA redacted] (package-lock.json)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• No exposed public API
• Test reliability not included
• dormant codebase — no living knowledge left to concentrate

• Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (the committed lockfile resolved no direct production dependency)
• High CVE: [GHSA redacted] (package-lock.json)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• No assertions: seed %d, 5000 operations (tests/stress/fuzz.test.ts)
• No dependency advisory monitoring
• Workflow holding a long-lived secret is unscoped

• 3 commits — 3 feature/other, 0 fixes

• (root) — 3 commits

• change: 0.1.3
• change: chore: update dev dependencies (lockfile only) (#78)
• change: docs: move dependency update notes into 0.1.3 changelog section

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

valehasadli/emitrix was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.