[compliance] Governance: Config Templates

[github-actions]

Governance: Config Templates

Dotfile and config file alignment with canonical templates

Rules

• CON-GOV-005: See entity definition

Findings (3)

Rule	File	Verdict	Evidence
CON-GOV-005	package.json	FAIL	Dependencies not in allowlist: @changesets/cli, @commitlint/cli, @commitlint/config-conventional, @eslint/js, @radix-ui/
CON-GOV-005	packages/showcase/package.json	FAIL	Dependencies not in allowlist: @eslint/js, @etherisc/ui-kit, @faker-js/faker, @hookform/resolvers, @playwright/test, @ta
CON-GOV-005	packages/ui-kit/package.json	FAIL	Dependencies not in allowlist: @chromatic-com/storybook, @codemirror/commands, @codemirror/lang-css, @codemirror/lang-ht

Suggested Actions

• CON-GOV-005: Remove or replace with an allowlisted package.

---

_{Auto-generated by compliance-checker | Scan: 2026-02-28 | Commit: fac255ddf75c}