chore(deps): bump compromise from 14.16.0 to 14.17.0

[dependabot]

Bumps compromise from 14.16.0 to 14.17.0.

Release notes

Sourced from compromise's releases.

14.17.0

• [change] - remove redundant re-tagging #1218
• [change] - split japanese/chinese sentences on 。！？ without trailing whitespace
• [change] - support fullwidth ？ in .questions()
• [change] - i18n sentence-split chars like ।॥ ؟ ۔ ։ ። ။ ។ full-stops
• [change] - use pnpm for github actions
• [new] - normalize fullwidth ascii - 'Ｈｅｌｌｏ ２０２４'
• [new] - support comments in spec-output fmt
• [fix] - replace all non-breaking spaces, not only the first
• [fix] - unicode non-breaking spaces in input #1220
• [fix] - cleanup of match-logic code

Changelog

Sourced from compromise's changelog.

14.17.0 [Sept 2026]

• [change] - remove redundant re-tagging #1218
• [change] - split japanese/chinese sentences on 。！？ without trailing whitespace
• [change] - support fullwidth ？ in .questions()
• [change] - i18n sentence-split chars like ।॥ ؟ ۔ ։ ። ။ ។ full-stops
• [change] - use pnpm for github actions
• [new] - normalize fullwidth ascii - 'Ｈｅｌｌｏ ２０２４'
• [new] - support comments in spec-output fmt
• [fix] - replace all non-breaking spaces, not only the first
• [fix] - unicode non-breaking spaces in input #1220
• [fix] - cleanup of match-logic code

Commits

• 3abc1c0 Merge pull request #1221 from spencermountain/dev
• f1547c6 14.17.0rc
• 9bf1005 ts tests
• 7d47cab tests passing
• ea730b6 6 failing
• e3bec7a 6 failing tests
• 07dd9cf 12 failing tests
• 578b40d failing tests
• 42cd516 fix errors in conjugation data
• dd3a15e sort pairs
• Additional commits viewable in compare view

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.
• ⚠️ 1 packages with OpenSSF Scorecard issues.

See the Details below.

OpenSSF Scorecard

Package	Version	Score	Details
npm/compromise	14.17.0	🟢 6.8	Details Check Score Reason Code-Review 🟢 7 Found 3/4 approved changesets -- score normalized to 7 Maintained 🟢 10 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions 🟢 8 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Fuzzing ⚠️ 0 project is not fuzzed Packaging 🟢 10 packaging workflow detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
npm/suffix-thumb	5.0.3	⚠️ 2.6	Details Check Score Reason Code-Review ⚠️ 1 Found 1/7 approved changesets -- score normalized to 1 Token-Permissions ⚠️ -1 No tokens found Maintained 🟢 3 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 Dangerous-Workflow ⚠️ -1 no workflows found Packaging ⚠️ -1 packaging workflow not detected Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Pinned-Dependencies ⚠️ -1 no dependencies found Security-Policy ⚠️ 0 security policy file not detected Signed-Releases ⚠️ -1 no releases found Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• package-lock.json

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🟢	Lines	99.71% (🎯 65%)	13731 / 13770
🟢	Statements	99.65% (🎯 65%)	16068 / 16123
🟢	Functions	99.56% (🎯 60%)	5505 / 5529
🟢	Branches	99.48% (🎯 58%)	12542 / 12607

File Coverage

No changed files found.

Generated in workflow #1471 for commit 2a4827f by the Vitest Coverage Report Action

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: fa195800-bbe9-486e-81c5-0e80a627d2be

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}