public/gitea
1
0
Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2025-10-31 21:28:11 +09:00
Code Issues Packages Projects Releases Wiki Activity

Use bundled version of spectral (#35573)

Browse Source 
To reduce the risk of npm supply chain attacks and to speed up
dependency installation, I've
[bundled](https://github.com/silverwind/spectral-cli-bundle) the
spectral package into a zero-dependency module. The upstream package is
pretty dead currently, so I expect to keep up with their updates.

The package
[exports](de05948c53/package.json (L9))
a `spectral` bin script, so `pnpm exec spectral` continues to work
as-is.

In total, this removes 86 dependencies from the npm dependency tree.
This commit is contained in:
silverwind
2025-10-04 00:25:09 +02:00
committed by GitHub
parent 17c8aa6587
commit 6589326e96
2 changed files with 15 additions and 814 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package.json
View File

@@ -67,7 +67,6 @@
"devDependencies": { "devDependencies": {
"@eslint-community/eslint-plugin-eslint-comments": "4.5.0", "@eslint-community/eslint-plugin-eslint-comments": "4.5.0",
"@playwright/test": "1.55.1", "@playwright/test": "1.55.1",
"@stoplight/spectral-cli": "6.15.0",
"@stylistic/eslint-plugin": "5.4.0", "@stylistic/eslint-plugin": "5.4.0",
"@stylistic/stylelint-plugin": "4.0.0", "@stylistic/stylelint-plugin": "4.0.0",
"@types/codemirror": "5.60.16", "@types/codemirror": "5.60.16",
@@ -102,6 +101,7 @@
"material-icon-theme": "5.27.0", "material-icon-theme": "5.27.0",
"nolyfill": "1.0.44", "nolyfill": "1.0.44",
"postcss-html": "1.8.0", "postcss-html": "1.8.0",
"spectral-cli-bundle": "1.0.3",
"stylelint": "16.24.0", "stylelint": "16.24.0",
"stylelint-config-recommended": "17.0.0", "stylelint-config-recommended": "17.0.0",
"stylelint-declaration-block-no-ignored-properties": "2.8.0", "stylelint-declaration-block-no-ignored-properties": "2.8.0",

827
pnpm-lock.yaml generated
View File

File diff suppressed because it is too large Load Diff