Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .npmrc
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
# pkg.pr.new registry bridge (added by test-pkg-pr-new-migrate.sh)
registry=https://pkg-pr-registry-bridge.void.app/
Comment on lines +1 to +2

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

security-high high

The .npmrc file contains a custom registry bridge that was automatically added by test-pkg-pr-new-migrate.sh. Committing this file will force all developers and CI environments to route package installations through this bridge, which can lead to security concerns (e.g., dependency hijacking) or build failures if the bridge is offline. This file should be removed from the PR and added to .gitignore if it is generated during local testing.

6 changes: 4 additions & 2 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -35,11 +35,13 @@
},
"devDependencies": {
"@types/node": "24.10.3",
"@vitest/coverage-v8": "4.1.8",
"@vitest/coverage-v8": "4.1.9",
"knip": "^6.0.0",
"oxc-parser": "0.136.0",
"typescript": "6.0.3",
"vite-plus": "catalog:"
"vite": "catalog:",
"vite-plus": "catalog:",
"vitest": "catalog:"
},
"peerDependencies": {
"oxc-parser": ">=0.98.0",
Expand Down
Loading
Loading