{"id":"data.validation.yup","compat":{"runtime":"node@>=20"},"schema":"turbineh.component/v0.1","source":{"purl":"pkg:npm/yup@1.7.1","repo":"https://github.com/jquense/yup","integrity":"sha512-GKHFX2nXul2/4Dtfxhozv701jLQHdf6J34YDh2cEkpqoo8le5Mg6/LrdseVLrFarmFygZTlfIhHx/QKfb/QWXw=="},"status":"approved","effects":{"db":false,"fs":false,"network":false,"external_services":[]},"license":{"declared":"MIT","detected":"MIT","obligations":["preserve-notice"]},"quality":{"tests":{"date":"2026-10-10","passed":true,"command":"contract.test.ts (vitest, sandbox --network none)"}},"version":"0.1.0","category":"data","contract":{"errors":["see contract.test.ts"],"inputs":["see contract.test.ts"],"limits":["see contract.test.ts"],"outputs":["see contract.test.ts"]},"evidence":[{"ref":"npm registry metadata yup@1.7.1","claim":"License MIT","origin":"maintainer"},{"ref":"https://api.osv.dev/v1/query","claim":"0 OSV advisories for yup@1.7.1 on 2026-10-10","origin":"tested"},{"ref":"/Users/alexruiz/TURBINEH/YES-IF-API-PRODUCT/code-api-turbineh/bench/results/2026-10-10-certify-batch-2.json","claim":"Contract tests pass in the sandbox without network","origin":"tested"}],"security":{"scope":"Known advisories for this exact version (OSV). Transitive dependencies are scanned when the component is assembled.","tools":["osv.dev-api"],"findings":[],"scanned_at":"2026-10-10"},"relations":{"provides":["data.validation"],"requires":[],"conflicts":[],"tested_with":["contract-harness"]},"capability":{"cons":[],"does":"Schema validation with casting and nested objects","pros":[],"does_not":"Does not provide compile-time inference as strong as zod","use_cases":["saas-crud","internal-tool","landing-waitlist","bookings","client-portal"],"alternatives":[]},"integration":{"config":[],"install":"pnpm add yup@1.7.1","strategy":"dependency","migrations":false}}