)]}'
{
  "log": [
    {
      "commit": "a38daa4f3a67692352e2fc6a71613a989491742f",
      "tree": "260b6d39edb29eda2667aa1a6251905a8d1da27a",
      "parents": [
        "6fad0c9d835f72290e25a927029bb603179a1e6a"
      ],
      "author": {
        "name": "Hughes Hilton",
        "email": "hugheshilton@google.com",
        "time": "Wed Sep 23 09:17:32 2026 -0700"
      },
      "committer": {
        "name": "AppSheet-Kokoro",
        "email": "appsheet-builder@appsheet-builder.iam.gserviceaccount.com",
        "time": "Wed Sep 23 09:17:32 2026 -0700"
      },
      "message": "Add Fortify THREAT_MODEL to new d3 repo\n\nBug: b/548453648\nChange-Id: I029ac3a1f0e91cd526fb52f41a1b160338b53a8f\nReviewed-on: https://gnocchi-internal-review.git.corp.google.com/c/third_party/d3/+/318824\nReviewed-by: Trevor Ryland \u003ctryland@google.com\u003e\n"
    },
    {
      "commit": "6fad0c9d835f72290e25a927029bb603179a1e6a",
      "tree": "156b59375099c81c9e3aef1156b50ba788029577",
      "parents": [
        "6776099c8c95cea146fb2400905ddd777fc31df1"
      ],
      "author": {
        "name": "Hughes Hilton",
        "email": "hugheshilton@google.com",
        "time": "Wed Sep 23 08:44:17 2026 -0700"
      },
      "committer": {
        "name": "Hughes Hilton",
        "email": "hugheshilton@google.com",
        "time": "Wed Sep 23 08:44:17 2026 -0700"
      },
      "message": "Remove the jsdom dependency and code we do not use\n\nBug: b/548453648\n\nd3 3.4.2 declares jsdom as a production dependency, but it is needed only\nby index.js, a Node-only shim that fakes a DOM so d3 can be required\noutside a browser. AppSheet imports d3/d3.min.js directly and never loads\nindex.js, so the dependency is pure cost: pulling d3 from the public npm\nregistry dragged 42 packages into jeenee\u0027s production dependency closure,\nand therefore into its generated OSS attribution, for code we never ship.\n\nDelete index.js and drop the jsdom dependency. Also delete the test suite,\nwhose test/load.js was the only other jsdom consumer and which cannot run\nwithout jsdom and vows anyway; the manifests and generator scripts for\npackage managers we do not use (Bower, Component, Composer); and the\nupstream Travis config and contributing guide. The Makefile rules for the\ngenerated bower.json and component.json and the test target go with them,\nas do the test-only vows and seedrandom devDependencies. Repoint main at\nd3.js, since index.js no longer exists.\n\nNormalize the license declaration from the legacy licenses array\n([{type: \"BSD\"}]) to the SPDX form \"license\": \"BSD-3-Clause\". This is a\nrestatement rather than a change of terms: the LICENSE file is the\nthree-clause BSD text, including the clause forbidding use of Michael\nBostock\u0027s name to endorse derived products. license-checker cannot\ninterpret the legacy array and flagged the package for manual review; with\nthe SPDX field it resolves automatically.\n\nd3.js, d3.min.js, src, the remaining build chain and lib are kept. lib\nholds the license files for code d3 derives from, including rhill-voronoi,\npenner, protovis and polymaps, so removing it would strip provenance for\ncode we do ship. src and the Makefile are what would be needed to rebuild\nd3.js and d3.min.js if the library ever has to be patched.\n\nd3.min.js is unchanged: md5 33a4640a0fc7e2a0ab47ec00b506f4c7, identical to\nthe copy checked into jeenee today and to the npm registry tarball.\nVerified by packing this repo and installing the tarball into a clean\nproject: npm reports \"added 1 package\", no jsdom is installed, and\nlicense-checker reports d3@3.4.2 as BSD-3-Clause.\n\nChange-Id: Ibca2c3a675ca81fa42ce8586c87e3fbd8b351d71\nReviewed-on: https://gnocchi-internal-review.git.corp.google.com/c/third_party/d3/+/318724\nAutosubmit: Hughes Hilton \u003chugheshilton@google.com\u003e\nSLSA-Policy-Verified: SLSA Policy Verification Service \u003cdevtools-gerritcodereview-exitgate@google.com\u003e\nReviewed-by: Trevor Ryland \u003ctryland@google.com\u003e\n"
    },
    {
      "commit": "6776099c8c95cea146fb2400905ddd777fc31df1",
      "tree": "bf06d51bdf0871ec969fc872348c2952279c8e20",
      "parents": [],
      "author": {
        "name": "Hughes Hilton",
        "email": "hugheshilton@google.com",
        "time": "Tue Sep 22 10:30:33 2026 -0700"
      },
      "committer": {
        "name": "Hughes Hilton",
        "email": "hugheshilton@google.com",
        "time": "Tue Sep 22 10:35:11 2026 -0700"
      },
      "message": "Initial pristine commit of AppSheet OSS D3 dependency\n\nBug: b/548453648\n\nThis library is currently checked into the jeenee repo and should be in a separate 3p repo since we can\u0027t pull it from npm without bringing in a lot of dependencies which we do not need or want.\n\nChange-Id: Idfcace764ba99be5f9c101fe0e34a697de23d8ab\n"
    }
  ]
}