The database is the source of truth; the site is a view over it.
- packages/core/db/schema.sql: vendors, products, categories, the 8-dimension
instrument, assessments, scores, evidence, findings, off-ramp, plus the
derived v_product_score view the game reads.
- packages/core/db/build.mjs: rebuilds bigtech.db, absorbs the legacy 43-product
roster as unassessed, applies seeds, then verifies the instrument's own rules
(weights sum to 100, totals recompute, grades match bands, every score has a
rationale, no tier-4 evidence on a scored dimension, reproducible-build caps
actually enforced).
- packages/core/db/seed/0001-signal.sql: Signal Desktop 8.36.0-alpha.1 on linux,
75.9/100 grade B, weakest dimension local_data_exposure. Evidence points at
the re-runnable audit artifacts in the Servetus vault.
- packages/core/src/data/generated/catalog.{ts,json}: generated export.
Verified: 44 products, 1 assessed, all checks pass.
20 lines
No EOL
722 B
JSON
20 lines
No EOL
722 B
JSON
{
|
|
"name": "bigtech-sucks",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"description": "Draw the Line — a planning site disguised as a retro frontier game",
|
|
"workspaces": [
|
|
"packages/*"
|
|
],
|
|
"scripts": {
|
|
"dev": "npm run dev -w @bigtech-sucks/web",
|
|
"dev:server": "npm run dev -w @bigtech-sucks/server",
|
|
"build": "npm run build -w @bigtech-sucks/core && npm run build -w @bigtech-sucks/web",
|
|
"build:server": "npm run build -w @bigtech-sucks/server",
|
|
"preview": "npm run preview -w @bigtech-sucks/web",
|
|
"test": "npm run test -w @bigtech-sucks/core",
|
|
"db:build": "node packages/core/db/build.mjs",
|
|
"db:verify": "node packages/core/db/build.mjs verify"
|
|
},
|
|
"license": "UNLICENSED"
|
|
} |