refactor: convert Promise.all to Promise.allSettled for parallel operations

Converts Promise.all to Promise.allSettled in build scripts, command utilities,
audit checks, and test setup to prevent memory leaks from short-circuited
rejected promises.

Changes:
- scripts/utils/run-command.mjs: runParallel() uses Promise.allSettled
- scripts/build.mjs: parallel builds use Promise.allSettled
- scripts/claude.mjs: executeParallel() and audit checks use Promise.allSettled
- test/purl-spec.test.mts: test file loading uses Promise.allSettled

Author: jdalton

scripts/build.mjs

@@ -351,7 +351,7 @@ async function main() {
       }
 
       // Run source and types builds in parallel
-      const [srcResult, typesExitCode] = await Promise.all([
+      const results = await Promise.allSettled([
         buildSource({
           quiet,
           verbose,
@@ -361,6 +361,13 @@ async function main() {
         buildTypes({ quiet, verbose, skipClean: true }),
       ])
 
+      const srcResult =
+        results[0].status === 'fulfilled'
+          ? results[0].value
+          : { exitCode: 1, buildTime: 0, result: null }
+      const typesExitCode =
+        results[1].status === 'fulfilled' ? results[1].value : 1
+
       // Log completion messages in order
       if (!quiet) {
         if (srcResult.exitCode === 0) {

scripts/claude.mjs

@@ -1914,7 +1914,8 @@ async function executeParallel(tasks, workers = 3) {
     }
   }
 
-  return Promise.all(results)
+  const settled = await Promise.allSettled(results)
+  return settled.map(r => (r.status === 'fulfilled' ? r.value : undefined))
 }
 
 /**
@@ -3420,12 +3421,19 @@ async function runAudit(claudeCmd, options = {}) {
   log.step('Gathering project information')
 
   // Run various checks.
-  const [npmAudit, depCheck, licenseCheck] = await Promise.all([
+  const results = await Promise.allSettled([
     runCommandWithOutput('npm', ['audit', '--json']),
     runCommandWithOutput('pnpm', ['licenses', 'list', '--json']),
     fs.readFile(path.join(rootPath, 'package.json'), 'utf8'),
   ])
 
+  const npmAudit =
+    results[0].status === 'fulfilled' ? results[0].value : { stdout: '' }
+  const depCheck =
+    results[1].status === 'fulfilled' ? results[1].value : { stdout: '' }
+  const licenseCheck =
+    results[2].status === 'fulfilled' ? results[2].value : '{}'
+
   const packageJson = JSON.parse(licenseCheck)
 
   const prompt = `Perform a comprehensive audit of the project:

scripts/utils/run-command.mjs

@@ -82,7 +82,8 @@ export async function runParallel(commands) {
   const promises = commands.map(({ args = [], command, options = {} }) =>
     runCommand(command, args, options),
   )
-  return Promise.all(promises)
+  const results = await Promise.allSettled(promises)
+  return results.map(r => (r.status === 'fulfilled' ? r.value : 1))
 }
 
 /**

test/purl-spec.test.mts

@@ -46,16 +46,18 @@ function toUrlSearchParams(search: string) {
 
 describe('PackageURL purl-spec test suite', async () => {
   // Tests from the official purl-spec test suite (data/*.json files)
-  const TEST_FILES = (
-    await Promise.all(
-      (
-        await glob(['**/**.json'], {
-          absolute: true,
-          cwd: path.join(__dirname, 'data'),
-        })
-      ).map(p => readJson(p)),
-    )
+  const settled = await Promise.allSettled(
+    (
+      await glob(['**/**.json'], {
+        absolute: true,
+        cwd: path.join(__dirname, 'data'),
+      })
+    ).map(p => readJson(p)),
   )
+
+  const TEST_FILES = settled
+    .filter(r => r.status === 'fulfilled')
+    .map(r => r.value)
     .filter(Boolean)
     .flatMap((o: any) => o.tests ?? [])