Conversation
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 3eb94b9. Configure here.
| "integrity": "sha512-8c3mgTe0ASwWAJK+78dpviD+A8EqhndQPUBpNUIPt6+xWlIigCwfN01lWr9MAede4uqXGTEKeQWTvzb3vjia0Q==", | ||
| "dev": true, | ||
| "license": "MIT", | ||
| "peer": true, |
There was a problem hiding this comment.
Lockfile incorrectly marks prettier as peer-only dependency
Medium Severity
The prettier entry in package-lock.json has a new "peer": true flag, but prettier is a direct devDependency in package.json. This flag indicates prettier exists only as a peer dependency of prettier-plugin-apex, which is incorrect. This lockfile inconsistency could cause prettier to be skipped during npm ci --omit=peer or pruned unexpectedly, breaking the prettier:format and prettier:check:ci scripts. The lockfile likely needs to be regenerated cleanly.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 3eb94b9. Configure here.
There was a problem hiding this comment.
I cleared and regenerated this lock file and it was exactly the same. I think this is a false positive.


Note
Medium Risk
Primarily dev-tooling upgrades, but the updated dependency tree (notably
joi) now requires Node >=20, which could break installs/CI environments on older Node versions.Overview
Renames the npm package to
launchdarkly-apex-server-sdk, marks itprivate, and bumps dev formatting tooling (prettierto3.8.2,prettier-plugin-apexto2.2.6).Regenerates
package-lock.json, pulling in new/updated transitive deps (including platform-specific optional@prettier-apexserializer binaries) and updating engine constraints (e.g.,joinow requires Node>=20).Reviewed by Cursor Bugbot for commit 1b6e568. Bugbot is set up for automated code reviews on this repo. Configure here.