Fix CORS issue for SPDX licenses

.github/workflows/framework-compat.yml

@@ -0,0 +1,69 @@
+name: Framework compatibility
+
+permissions:
+  contents: read
+
+on:
+  push:
+    branches: [main] # Only run on main branch
+  pull_request:
+    branches: ['*'] # Run on all branches
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
+        with:
+          node-version: 22
+          cache: npm
+      - name: Install dependencies
+        run: npm ci
+      - name: Build packages
+        run: npm run build
+      - name: Pack tarballs
+        run: |
+          mkdir -p tarballs
+          npm pack ./packages/stencil-library --pack-destination tarballs
+          npm pack ./packages/react-library --pack-destination tarballs
+          npm pack ./packages/vue-library --pack-destination tarballs
+          npm pack ./packages/angular-library --pack-destination tarballs
+      - uses: actions/upload-artifact@v7
+        with:
+          name: compat-tarballs
+          path: tarballs
+          retention-days: 1
+
+  verify:
+    runs-on: ubuntu-latest
+    needs: build
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - framework: angular
+            consumer: 20
+          - framework: angular
+            consumer: 21
+          - framework: angular
+            consumer: 22
+          - framework: react
+            consumer: 18
+          - framework: react
+            consumer: 19
+          - framework: vue
+            consumer: 3
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
+        with:
+          node-version: 22
+      - uses: actions/download-artifact@v8
+        with:
+          name: compat-tarballs
+          path: tarballs
+      - name: Verify ${{ matrix.framework }} ${{ matrix.consumer }} compatibility
+        run: node scripts/verify-framework-compat.js ${{ matrix.framework }} ${{ matrix.consumer }}
+        env:
+          PREBUILT_TARBALLS: tarballs

.github/workflows/npm-ci.yml

@@ -32,6 +32,8 @@ jobs:
         run: npm run build-storybook
       - name: Lint code
         run: npm run lint
+      - name: Type-check packages
+        run: npm run typecheck
       - name: Run all tests (Stencil spec + E2E + Storybook)
         id: test
         run: npm test

.gitignore

@@ -10,6 +10,24 @@ packages/examples
 packages/stencil-library/test-results.junit.xml
 packages/vue-library/.output
 
+# Collocated TypeScript/stencil emit artifacts.
+# Regenerated on `npm run build` / a stray `tsc -p` without --outDir; never commit.
+# Scoped to source/sample dirs so the legitimate *.config.js files at package
+# roots (postcss.config.js, eslint.config.js, ...) stay tracked.
+**/*.js.map
+**/src/**/*.js
+**/src/**/*.d.ts
+**/lib/**/*.js
+**/lib/**/*.d.ts
+**/demo/**/*.js
+**/demo/**/*.d.ts
+**/stories/**/*.js
+**/stories/**/*.d.ts
+**/examples/**/*.js
+**/examples/**/*.d.ts
+**/app/**/*.js
+**/app/**/*.d.ts
+
 *~
 *.sw[mnpcod]
 *.log

README.md

@@ -120,6 +120,13 @@ You can customize the behavior of specific renderers by passing a JSON configura
   - Options: `light`, `dark`, `system`.
   - Default: `system`.
 
+**SPDXType**
+
+- `requestTimeout` (number): Timeout in milliseconds for the SPDX license-detail fetch.
+  - Default: `10000`.
+- License details are fetched directly from the [spdx/license-list-data](https://github.com/spdx/license-list-data) raw JSON
+  (`json/details/{ID}.json` on `raw.githubusercontent.com`). This is necessary since SPDX.org does not ship CORS headers.
+
 ### Example Configuration
 
 ```html