mr-tanta/ndpr-toolkit

Open-source React & TypeScript library for Nigeria Data Protection Act (NDPA) 2023 compliance. Cookie consent, DSR portal, DPIA, 72-hour breach notification, RoPA, lawful-basis, privacy-policy generator. # @tantainnovative/ndpr-toolkit **Compliance infrastructure for the Nigeria Data Protection Act (NDPA) 2023** The toolkit ships **zero-config presets**, **pluggable storage adapters**, **compound components**, **structured-error validators**, a **compliance score engine**, and **seven shipped locales** (en, yo, ig, ha, pcm, ar, fr) — eight production-ready modules covering consent, data subject rights, DPIA, breach notification, privacy policies, lawful basis, cross-border transfers, and ROPA. **5.2–5.5 add an NDPC GAID 2025 layer**: a DCPMI designation classifier, a Compliance Audit Returns scheduler, a Section 40 / Article 33 breach-notification checker (wired live into `BreachReportForm`), and an **`ndpr audit` CLI** that gates compliance in CI. **Documentation** | **Live Demos** | **npm** | **Blog** | **Latest Release** > **What's new in 6.0.0:** A production-boundary hardening release. Tenant, subject, actor, and role authority are server-controlled; recipe business/audit writes are atomic; consent replay uses canonical safe-integer client timestamps; breach duties fail closed unless complete correlated evidence establishes otherwise; and CAR configuration/provenance is strictly validated. Fresh scaffolds from `@tantainnovative/create-ndpr@0.5.0` cover all 15 framework/layout/ORM combinations. The unscoped `create-ndpr@1.0.0` alias remains unchanged and delegates to the latest scoped CLI. Backend users upgrading to `@tantainnovative/ndpr-recipes@0.3.0` from `0.1.x` or `0.2.0` must use the reviewed `migrations/0.3.0` guide rather than a blind schema push. Full upgrade path: 5.7 → 6.0 migration guide. > > **What's new in 5.5:** The **`ndpr audit` CLI** scores a compliance config against the toolkit engine (compliance score + GAID 2025 DCPMI / CAR / breach checks) and exits non-zero on failure — a drop-in CI gate. The same logic is exported as `runNdprAudit` / `formatNdprAuditReport` from `/server`. See the audit CLI guide. > > **NDPC GAID 2025 utili …