Fast, disk space efficient package manager
1907 matches across 9 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | deny.toml | 21 | unmaintained = "workspace" |
| LOW | rustfmt.toml | 1 | # Make Rust more readable given most people have wide screens nowadays. |
| LOW | dylint.toml | 1 | # Dylint configuration. cargo-dylint reads `[workspace.metadata.dylint]` |
| LOW | dylint.toml | 21 | # to a `let` internally before the match, so the expression is |
| LOW | installing/deps-resolver/src/linkPathToPeerVersion.ts | 1 | // Converts a link: path into a stable, filename-safe token used as the |
| LOW | installing/deps-resolver/src/index.ts | 181 | // list to the install command's hook. The hook throws to abort |
| LOW | installing/deps-installer/test/catalogs.ts | 901 | // this should be the case even if pnpm-workspace.yaml still has |
| LOW | installing/deps-installer/test/link.ts | 81 | // const projects = prepare(t, [ |
| LOW | installing/deps-installer/test/link.ts | 101 | // }, |
| LOW | …ing/deps-installer/test/install/injectLocalPackages.ts | 2021 | // it to the filesMap; the importer's fast path then wiped the target before |
| LOW | …eps-installer/src/install/verifyLockfileResolutions.ts | 81 | if (verifiers.length === 0) return |
| LOW | installing/deps-installer/src/install/index.ts | 361 | // cache, etc. — bypassing the local resolver's policy filters; the local |
| LOW | installing/deps-installer/src/install/index.ts | 1981 | } |
| LOW | installing/env-installer/src/installConfigDeps.ts | 61 | // The parent's GVS hash must incorporate its optional subdeps; otherwise |
| LOW | installing/commands/src/runPacquet.ts | 81 | } |
| LOW | installing/commands/src/installDeps.ts | 201 | } |
| LOW | config/reader/src/loadNpmrcFiles.ts | 141 | // rejects these unscoped since npm@9 (ERR_INVALID_AUTH); pnpm keeps them |
| LOW | config/reader/src/loadNpmrcFiles.ts | 201 | // equivalents (`//host[:port]/path/:<key>=...`) using `source.registry` — |
| LOW | __fixtures__/pnpm-workspace.yaml | 21 | |
| LOW | shell/resolve-pr-conflicts.sh | 1 | #!/usr/bin/env bash |
| LOW | resolving/local-resolver/README.md | 21 | resolveFromLocal({bareSpecifier: './example-package'}, {prefix: process.cwd()}) |
| LOW | resolving/npm-resolver/README.md | 41 | // "ava": "^0.0.4" |
| LOW | resolving/npm-resolver/test/publishedBy.test.ts | 361 | // would rethrow ERR_PNPM_MISSING_TIME under what used to be |
| LOW | …olving/npm-resolver/src/createNpmResolutionVerifier.ts | 141 | const parsed = tryParseUrl(url) |
| LOW | …olving/npm-resolver/src/createNpmResolutionVerifier.ts | 381 | // Fast path: if the resolver already upgraded to full meta for this |
| LOW | …olving/npm-resolver/src/createNpmResolutionVerifier.ts | 401 | // is more actionable than the generic "metadata is unavailable" the |
| LOW | resolving/npm-resolver/src/pickPackage.ts | 441 | meta, |
| LOW | resolving/npm-resolver/src/pickPackage.ts | 481 | const modifiedDate = meta.modified ? new Date(meta.modified) : null |
| LOW | workspace/projects-graph/README.md | 41 | // dependencies: ['/home/zkochan/src/bar'], |
| LOW | lockfile/utils/src/pkgSnapshotToResolution.ts | 21 | // - `file:` tarballs (local file on the user's machine; integrity |
| LOW | __typings__/index.d.ts | 1 | /// <reference path="local.d.ts" /> |
| LOW | pnpm/bundle-deps.ts | 1 | import fs from 'node:fs' |
| LOW | pnpm/bundle-deps.ts | 21 | // This is used to include certain dependencies like node-gyp out of the box |
| LOW | pnpm/bundle-deps.ts | 41 | // │ ├── pnpm-lock.yaml │ |
| LOW | pnpm/artifacts/exe/setup.js | 21 | // Only treat ERR_MODULE_NOT_FOUND as "platform package not installed". |
| LOW | pnpm/artifacts/exe/setup.js | 61 | |
| LOW | pnpm/test/packageManagerCheck.test.ts | 681 | }) |
| LOW | pnpm/test/configurationalDependencies.test.ts | 221 | |
| LOW | pnpm/test/install/global.ts | 161 | const pkgPath = findGlobalPkg(globalPkgDir(pnpmHome), '@pnpm.e2e/postinstall-calls-pnpm') |
| LOW | cli/default-reporter/src/reportError.ts | 501 | `, |
| LOW | benchmarks/bench.sh | 1 | #!/bin/bash |
| LOW | __utils__/jest-config/jest.transform.js | 21 | }) |
| LOW | .github/workflows/release.yml | 41 | # use trusted publishing (OIDC) vs. a static token. `pnpm publish` currently bails |
| LOW | .github/workflows/release.yml | 61 | # at the end of the step so it can't leak into the trusted-publishing step that |
| LOW | …hub/workflows/pacquet-integrated-benchmark-comment.yml | 1 | name: Pacquet Integrated-Benchmark Comment |
| LOW | …hub/workflows/pacquet-integrated-benchmark-comment.yml | 41 | steps: |
| LOW | …hub/workflows/pacquet-integrated-benchmark-comment.yml | 61 | shell: bash |
| LOW | .github/workflows/codeql-analysis.yml | 1 | # For most projects, this workflow file will not need changing; you simply need |
| LOW | .github/workflows/pacquet-ci.yml | 201 | steps: |
| LOW | .github/workflows/pacquet-ci.yml | 261 | - name: Install cargo-dylint and dylint-link |
| LOW | exec/lifecycle/src/runLifecycleHook.ts | 41 | // be spawned without the "shell: true" option. |
| LOW | exec/commands/test/dlx.e2e.ts | 401 | expect(fs.existsSync(path.join(builtPkg2Path, 'generated-by-install.js'))).toBeTruthy() |
| LOW | exec/commands/src/dlx.ts | 261 | manifest = await readProjectManifestOnly(pkgDir, opts) as PackageManifest |
| LOW | deps/inspection/tree-builder/test/getTree.test.ts | 481 | ]) |
| LOW | deps/inspection/outdated/src/outdated.ts | 201 | // - If the dep-path parses to a semver, that's the value (handles |
| LOW | .meta-updater/src/index.ts | 241 | // main tsconfig.json could inherit another conifg that sets composite |
| LOW | pnpr/crates/pnpr/src/cache.rs | 21 | |
| LOW | pnpr/crates/pnpr/src/policy.rs | 1 | //! Per-package access rules. Mirrors verdaccio's `packages:` config: |
| LOW | pnpr/crates/pnpr/src/error.rs | 41 | }, |
| LOW | pnpr/crates/pnpr/src/error.rs | 81 | }, |
| 1461 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | crypto/object-hasher/src/index.ts | 44 | export function hashObjectNullableWithPrefix (object: Record<string, unknown> | undefined): PrefixedHash | undefined { |
| LOW | crypto/shasums-file/src/index.ts | 46 | export function pickFileChecksumFromShasumsFile (body: string, fileName: string): string { |
| LOW | crypto/hash/src/index.ts | 19 | export async function createHashFromMultipleFiles (files: string[]): Promise<string> { |
| LOW | installing/deps-resolver/src/resolveDependencyTree.ts | 413 | function dedupeSameAliasDirectDeps (directDeps: PkgAddressOrLink[], wantedDependencies: Array<WantedDependency & { isNew |
| LOW | …lling/deps-resolver/src/wantedDepIsLocallyAvailable.ts | 7 | export function wantedDepIsLocallyAvailable ( |
| LOW | …lling/deps-resolver/src/wantedDepIsLocallyAvailable.ts | 21 | function pickMatchingLocalVersionOrNull ( |
| LOW | installing/deps-resolver/src/validateDependencyAlias.ts | 15 | export function assertValidDependencyAliases ( |
| LOW | installing/deps-resolver/src/hoistPeers.ts | 67 | export function getHoistableOptionalPeers ( |
| LOW | installing/deps-resolver/src/resolvePeers.ts | 740 | function parentPkgsHaveSingleOccurrence (parentPkgs: Record<string, ParentPkgInfo>): boolean { |
| LOW | …ing/deps-resolver/src/replaceVersionInBareSpecifier.ts | 3 | export function replaceVersionInBareSpecifier ( |
| LOW | installing/deps-resolver/src/index.ts | 395 | async function waitTillAllFetchingsFinish (): Promise<void> { |
| LOW | installing/deps-resolver/src/index.ts | 417 | function addDirectDependenciesToLockfile ( |
| LOW | installing/deps-resolver/src/index.ts | 500 | function getAliasToDependencyTypeMap (manifest: ProjectManifest): Record<string, DependenciesField> { |
| LOW | installing/deps-resolver/src/toResolveImporter.ts | 142 | function getPreferredVersionsFromPackage ( |
| LOW | installing/deps-resolver/src/toResolveImporter.ts | 150 | function getVersionSpecsByRealNames (deps: Dependencies): VersionSpecsByRealNames { |
| LOW | installing/deps-resolver/src/getWantedDependencies.ts | 53 | function getWantedDependenciesFromGivenSet ( |
| LOW | installing/deps-resolver/src/resolveDependencies.ts | 466 | async function resolveDependenciesOfImporters ( |
| LOW | installing/deps-resolver/src/resolveDependencies.ts | 589 | async function resolveDependenciesOfImporterDependency ( |
| LOW | installing/deps-resolver/src/resolveDependencies.ts | 639 | function filterMissingPeersFromPkgAddresses ( |
| LOW | installing/deps-resolver/src/resolveDependencies.ts | 838 | async function resolveDependenciesOfDependency ( |
| LOW | installing/deps-resolver/src/resolveDependencies.ts | 976 | export function createNodeIdForLinkedLocalPkg (lockfileDir: string, pkgDir: string): NodeId { |
| LOW | installing/deps-resolver/src/resolveDependencies.ts | 1161 | function referenceSatisfiesWantedSpec ( |
| LOW | installing/deps-resolver/src/resolveDependencies.ts | 1795 | function peerDependenciesWithoutOwn (pkg: PackageManifest): PeerDependencies { |
| LOW | installing/deps-resolver/src/resolveDependencies.ts | 1821 | function getCatalogExistingVersionFromSnapshot ( |
| LOW | …g/deps-resolver/src/getExactSinglePreferredVersions.ts | 9 | export function getExactSinglePreferredVersions (wantedDependency: WantedDependency, version: string): PreferredVersions |
| LOW | …lling/deps-resolver/src/getNonDevWantedDependencies.ts | 20 | export function getNonDevWantedDependencies (pkg: GetNonDevWantedDependenciesManifest): WantedDependency[] { |
| LOW | …lling/deps-resolver/src/getNonDevWantedDependencies.ts | 42 | function getWantedDependenciesFromGivenSet ( |
| LOW | installing/deps-restorer/test/index.ts | 28 | function prepareFixtureWithIntegrity (name: string): string { |
| LOW | …talling/deps-restorer/src/lockfileToHoistedDepGraph.ts | 65 | export async function lockfileToHoistedDepGraph ( |
| LOW | …talling/deps-restorer/src/lockfileToHoistedDepGraph.ts | 304 | async function dirHasPackageJsonWithVersion (dir: string, expectedVersion?: string): Promise<boolean> { |
| LOW | installing/deps-restorer/src/index.ts | 736 | async function symlinkDirectDependencies ( |
| LOW | installing/context/src/index.ts | 237 | export async function getContextForSingleImporter ( |
| LOW | installing/context/src/index.ts | 382 | export function arrayOfWorkspacePackagesToMap ( |
| LOW | installing/deps-installer/test/catalogs.ts | 23 | function preparePackagesAndReturnObjects (manifests: Array<ProjectManifest & Required<Pick<ProjectManifest, 'name'>>>) { |
| LOW | …stalling/deps-installer/src/install/validateModules.ts | 135 | async function purgeModulesDirsOfImporter ( |
| LOW | …stalling/deps-installer/src/install/validateModules.ts | 145 | async function purgeModulesDirsOfImporters ( |
| LOW | …staller/src/install/writeLockfilesAndRecordVerified.ts | 20 | export async function writeLockfilesAndRecordVerified ( |
| LOW | …ps-installer/src/install/reportPeerDependencyIssues.ts | 9 | export function reportPeerDependencyIssues ( |
| LOW | …ps-installer/src/install/reportPeerDependencyIssues.ts | 33 | export function filterPeerDependencyIssues ( |
| LOW | …eps-installer/src/install/verifyLockfileResolutions.ts | 76 | export async function verifyLockfileResolutions ( |
| LOW | …eps-installer/src/install/verifyLockfileResolutions.ts | 221 | export async function collectResolutionPolicyViolations ( |
| LOW | …eps-installer/src/install/verifyLockfileResolutions.ts | 263 | async function iterateLockfileViolations ( |
| LOW | …nstaller/src/install/verifyLockfileResolutionsCache.ts | 236 | export function tryLockfileVerificationCache ( |
| LOW | …nstaller/src/install/verifyLockfileResolutionsCache.ts | 291 | function everyVerifierTrustsCachedRun (record: CacheRecord, verifiers: readonly VerifierCacheIdentity[]): boolean { |
| LOW | …staller/src/install/checkCustomResolverForceResolve.ts | 11 | export async function checkCustomResolverForceResolve ( |
| LOW | …er/src/install/writeWantedLockfileAndRecordVerified.ts | 18 | export async function writeWantedLockfileAndRecordVerified ( |
| LOW | installing/deps-installer/src/install/index.ts | 233 | export async function mutateModulesInSingleProject ( |
| LOW | installing/deps-installer/src/install/index.ts | 1085 | async function runUnignoredDependencyBuilds ( |
| LOW | installing/deps-installer/src/install/index.ts | 1127 | function forgetResolutionsOfPrevWantedDeps ( |
| LOW | installing/deps-installer/src/install/index.ts | 1147 | function forgetResolutionsOfAllPrevWantedDeps (wantedLockfile: LockfileObject): void { |
| LOW | installing/deps-installer/src/install/index.ts | 1181 | function isWantedDepBareSpecifierSame ( |
| LOW | installing/deps-installer/src/install/index.ts | 2045 | function dedupePackageNamesFromIgnoredBuilds (ignoredBuilds: IgnoredBuilds): string[] { |
| LOW | installing/deps-installer/src/install/index.ts | 2243 | function applyResolvedSpecsFromLockfile ( |
| LOW | installing/env-installer/src/pruneEnvLockfile.ts | 10 | export function convertToLockfileEnvObject (envLockfile: EnvLockfile): LockfileObject { |
| LOW | installing/env-installer/src/installConfigDeps.ts | 206 | function readOptionalSubdepsFromLockfile ( |
| LOW | …/env-installer/src/resolvePackageManagerIntegrities.ts | 47 | export async function resolvePackageManagerIntegrities ( |
| LOW | …lling/env-installer/src/resolveAndInstallConfigDeps.ts | 34 | export async function resolveAndInstallConfigDeps ( |
| LOW | installing/env-installer/src/migrateConfigDeps.ts | 24 | export async function migrateConfigDepsToLockfile ( |
| LOW | …lling/env-installer/src/resolveManifestDependencies.ts | 34 | export async function resolveManifestDependencies ( |
| LOW | installing/commands/src/handleIgnoredBuilds.ts | 27 | async function writeIgnoredBuildsToAllowBuilds ( |
| 247 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …ling/deps-installer/test/install/globalVirtualStore.ts | 214 | // Step 1: Install with no packages allowed to build (engine-agnostic hashes) |
| LOW | …ling/deps-installer/test/install/globalVirtualStore.ts | 228 | // Step 2: Reinstall with dep allowed to build — hashes should change |
| LOW | …ling/deps-installer/test/install/globalVirtualStore.ts | 299 | // Step 1: Install with builds NOT approved (simulating first `pnpm install`) |
| LOW | …ling/deps-installer/test/install/globalVirtualStore.ts | 314 | // Step 2: Reinstall with allowBuilds changed (simulating what approve-builds does) |
| LOW | …ling/deps-installer/test/install/globalVirtualStore.ts | 322 | // Step 3: Verify the hash changed and build artifacts are in the new directory |
| LOW | …ling/deps-installer/test/install/globalVirtualStore.ts | 376 | // Step 1: Successful install with build |
| LOW | …ling/deps-installer/test/install/globalVirtualStore.ts | 390 | // Step 2: Simulate a previous build failure by removing the GVS hash directory |
| LOW | …ling/deps-installer/test/install/globalVirtualStore.ts | 394 | // Step 3: Remove node_modules and reinstall with frozenLockfile |
| LOW | …ling/deps-installer/test/install/globalVirtualStore.ts | 420 | // Step 1: Install with build |
| LOW | …ling/deps-installer/test/install/globalVirtualStore.ts | 437 | // Step 2: Simulate a crash between import and build — write a .pnpm-needs-build |
| LOW | …ling/deps-installer/test/install/globalVirtualStore.ts | 446 | // Step 3: Reinstall — the GVS fast path should detect the .pnpm-needs-build |
| LOW | …alling/deps-installer/test/install/autoInstallPeers.ts | 683 | // Step 1: install without override — auto-installs peer-c@1.0.1 |
| LOW | …alling/deps-installer/test/install/autoInstallPeers.ts | 696 | // Step 2: reinstall with override narrowing peer-c to 1.0.0 |
| LOW | workspace/injected-deps-syncer/src/index.ts | 82 | // Step 1: Link bins in .pnpm virtual store |
| LOW | workspace/injected-deps-syncer/src/index.ts | 98 | // Step 2: Relink bins for all workspace projects |
| LOW | pnpm/test/install/minimumReleaseAge.ts | 30 | // Step 1: populate a lockfile under no policy. The resolver picks |
| LOW | pnpm/test/install/minimumReleaseAge.ts | 37 | // Step 2: turn on minimumReleaseAge in strict mode. The lockfile is now |
| LOW | pnpm/test/install/minimumReleaseAge.ts | 81 | // Step 1: populate the lockfile with no policy. is-positive@1.0.0 |
| LOW | pnpm/test/install/minimumReleaseAge.ts | 88 | // Step 2: turn the policy on. The post-resolution gate now runs |
| LOW | pnpm/test/install/minimumReleaseAge.ts | 113 | // Step 3: another install with the same lockfile + policy. The cache |
| LOW | pnpm/test/install/minimumReleaseAge.ts | 368 | // Step 1: install with the full exclude list — verifier writes a |
| LOW | pnpm/test/install/minimumReleaseAge.ts | 377 | // Step 2: drop `is-odd` from the exclude list. The cached record |
| LOW | pnpm/test/install/globalVirtualStore.ts | 47 | // Step 1: Install with GVS, builds NOT approved |
| LOW | pnpm/test/install/globalVirtualStore.ts | 57 | // Step 2: approve-builds — updates config then runs install in GVS mode |
| LOW | pnpm/test/install/globalVirtualStore.ts | 60 | // Step 3: Verify GVS hash changed (new engine-specific directory) |
| LOW | pnpm/test/install/misc.ts | 648 | // Step 1: install with trust policy off. The resolver picks up the |
| LOW | pnpm/test/install/misc.ts | 656 | // Step 2: turn the policy on. The resolver wouldn't be invoked under |
| LOW | pacquet/crates/network/src/tls.rs | 209 | // Step 1: exact URL. |
| LOW | pacquet/crates/network/src/tls.rs | 213 | // Step 2: nerf-darted URL. |
| LOW | pacquet/crates/network/src/tls.rs | 220 | // Step 4: walk progressively shorter prefixes of the |
| LOW | pacquet/crates/network/src/tls/tests.rs | 98 | // Step 2: with no exact match, the nerf-darted URL hits the |
| LOW | pacquet/crates/network/src/tls/tests.rs | 109 | // Step 4: a `//host/scope/` key matches any URL under that |
| LOW | pacquet/crates/git-fetcher/src/tarball_fetcher.rs | 98 | // Step 1: Materialize the CAS-resident files into a writable |
| LOW | pacquet/crates/git-fetcher/src/tarball_fetcher.rs | 104 | // Step 2: Run `preparePackage` on the materialized tree. This |
| LOW | pacquet/crates/git-fetcher/src/tarball_fetcher.rs | 145 | // Step 3: Compute the packlist over the prepared tree. The |
| LOW | pacquet/crates/git-fetcher/src/tarball_fetcher.rs | 155 | // Step 4: Fast path — when nothing got filtered out AND |
| LOW | pacquet/crates/git-fetcher/src/tarball_fetcher.rs | 199 | // Step 5: Slow path — re-import the filtered file set back |
| LOW | pacquet/crates/git-fetcher/src/tarball_fetcher.rs | 204 | // Step 6: Queue a `PackageFilesIndex` row so a future install's |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | installing/deps-installer/test/install/auth.ts | 18 | email: 'foo@bar.com', |
| LOW | installing/deps-installer/test/install/auth.ts | 56 | email: 'foo@bar.com', |
| LOW | installing/deps-installer/test/install/auth.ts | 77 | email: 'foo@bar.com', |
| LOW | installing/deps-installer/test/install/auth.ts | 125 | email: 'foo@bar.com', |
| LOW | installing/deps-installer/test/install/auth.ts | 173 | email: 'foo@bar.com', |
| LOW | installing/deps-installer/test/install/auth.ts | 199 | email: 'foo@bar.com', |
| LOW | __fixtures__/has-outdated-deps/pnpm-lock.yaml | 26 | deprecated: This package is deprecated. Lorem ipsum dolor sit amet, consectetur adipiscing elit. |
| LOW | __fixtures__/has-outdated-deps/pnpm-lock.yaml | 26 | deprecated: This package is deprecated. Lorem ipsum dolor sit amet, consectetur adipiscing elit. |
| LOW | __fixtures__/has-only-deprecated-deps/pnpm-lock.yaml | 16 | deprecated: This package is deprecated. Lorem ipsum dolor sit amet, consectetur adipiscing elit. |
| LOW | __fixtures__/has-only-deprecated-deps/pnpm-lock.yaml | 16 | deprecated: This package is deprecated. Lorem ipsum dolor sit amet, consectetur adipiscing elit. |
| LOW | resolving/npm-resolver/test/trustChecks.test.ts | 88 | email: 'user@example.com', |
| LOW | resolving/npm-resolver/test/trustChecks.test.ts | 104 | email: 'user@example.com', |
| LOW | resolving/npm-resolver/test/trustChecks.test.ts | 107 | email: 'user@example.com', |
| LOW | resolving/npm-resolver/test/trustChecks.test.ts | 124 | email: 'user@example.com', |
| LOW | resolving/npm-resolver/test/trustChecks.test.ts | 127 | email: 'user@example.com', |
| LOW | pnpm/test/dlx.ts | 397 | email: 'foo@bar.com', |
| LOW | deps/compliance/sbom/test/serializeCycloneDx.test.ts | 27 | author: 'Jane Doe', |
| LOW | deps/compliance/sbom/test/serializeCycloneDx.test.ts | 130 | sbomAuthors: ['Jane Doe', 'John Smith'], |
| LOW | deps/compliance/sbom/test/serializeCycloneDx.test.ts | 134 | expect(parsed.metadata.authors).toEqual([{ name: 'Jane Doe' }, { name: 'John Smith' }]) |
| LOW | deps/compliance/sbom/test/serializeCycloneDx.test.ts | 249 | expect(parsed.components[0].authors).toEqual([{ name: 'Jane Doe' }]) |
| LOW | deps/inspection/commands/test/outdated/index.ts | 64 | │ @pnpm.e2e/deprecated │ 1.0.0 │ Deprecated │ This package is deprecated. Lorem ipsum │ |
| LOW | deps/inspection/commands/test/outdated/index.ts | 65 | │ │ │ │ dolor sit amet, consectetur adipiscing │ |
| LOW | deps/inspection/commands/test/outdated/index.ts | 184 | This package is deprecated. Lorem ipsum dolor sit amet, consectetur adipiscing elit. |
| LOW | deps/inspection/commands/test/outdated/index.ts | 184 | This package is deprecated. Lorem ipsum dolor sit amet, consectetur adipiscing elit. |
| LOW | deps/inspection/commands/test/outdated/index.ts | 529 | │ @pnpm.e2e/deprecated │ 1.0.0 │ Deprecated │ This package is deprecated. Lorem ipsum │ |
| LOW | deps/inspection/commands/test/outdated/index.ts | 530 | │ │ │ │ dolor sit amet, consectetur adipiscing │ |
| LOW | …tures/packages/@pnpm.e2e/deprecated/1.0.0/package.json | 5 | "deprecated": "This package is deprecated. Lorem ipsum dolor sit amet, consectetur adipiscing elit." |
| LOW | …tures/packages/@pnpm.e2e/deprecated/1.0.0/package.json | 5 | "deprecated": "This package is deprecated. Lorem ipsum dolor sit amet, consectetur adipiscing elit." |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | installing/deps-installer/test/catalogs.ts | 987 | // Double check the correct version of is-positive as requested from the |
| HIGH | installing/deps-installer/test/catalogs.ts | 1055 | // Double check the correct version of is-positive as requested from the |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | pnpm/bundle-deps.ts | 39 | // │ ├── node_modules ──────────────┐ |
| MEDIUM | pnpm/bundle-deps.ts | 47 | // │ ├── node_modules <────────────┘ |
| MEDIUM | pacquet/crates/config/src/version_policy/tests.rs | 102 | // ─── create_package_version_policy ──────────────────────────────────── |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | .github/workflows/test.yml | 77 | # The test harness serves package fixtures through the in-repo |
| MEDIUM | pacquet/crates/package-manager/src/install/tests.rs | 4533 | // literal here. Membership-by-name keeps the test robust to the |
| MEDIUM | pacquet/crates/fs/src/ensure_file/tests.rs | 83 | /// those keeps the test robust without weakening what it verifies |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .github/workflows/pacquet-micro-benchmark.yml | 113 | # Check if the event is not triggered by a fork |
| LOW | .github/workflows/pacquet-micro-benchmark.yml | 123 | # Check if the event is not triggered by a fork |
| LOW | .github/workflows/update-lockfile.yml | 56 | # Check if branch exists on remote |
| LOW | .github/workflows/update-lockfile.yml | 73 | # Check if PR already exists |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | shell/resolve-pr-conflicts.sh | 4 | # Usage: |