chore: update package.json for dependency installation test#8
chore: update package.json for dependency installation test#8pullfrog[bot] wants to merge 27 commits intomainfrom
Conversation
…nto pullfrog/restore-package-json
…nto pullfrog/restore-package-json
…nto pullfrog/restore-package-json
…nto pullfrog/restore-package-json
…nto pullfrog/restore-package-json
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit d94736f. Configure here.
| } | ||
| "postinstall": "echo CANARY_MARKER > /tmp/postinstall-canary.txt" | ||
| }, | ||
| "dependencies": {} |
There was a problem hiding this comment.
Test stub overwrites real package.json configuration
High Severity
This change replaces the project's functional package.json with a minimal test stub. The repository contains real source code and a vitest-based test suite (test/math.test.ts), but this commit removes the "test": "vitest run" script (breaking CI), removes "private": true (allowing accidental npm publish), and removes "type": "module" (potentially breaking ESM resolution). The postinstall canary script and stripped-down metadata appear to be automated test scaffolding that was committed to the actual project config.
Reviewed by Cursor Bugbot for commit d94736f. Configure here.
…nto pullfrog/restore-package-json
…nto pullfrog/restore-package-json
…nto pullfrog/restore-package-json
…nto pullfrog/restore-package-json
…nto pullfrog/restore-package-json
…nto pullfrog/restore-package-json
…nto pullfrog/restore-package-json
…nto pullfrog/restore-package-json


Updates
package.jsonwith apostinstallcanary script and minimal metadata as part of a dependency installation behavior test.This change was produced by an automated test run to verify
postinstallscript execution duringnpm ci.Claude Opus| 𝕏Note
Medium Risk
Adds a
postinstallscript that writes to/tmp, which will execute automatically during installs and can affect CI/build environments. Otherwise the change is limited to package metadata and removal of the test script.Overview
Updates
package.jsonto a minimal install-focused setup: renames the package, adds aversion, and removesprivate/typemetadata and thetestscript.Adds a
postinstallcanary script that writesCANARY_MARKERto/tmp/postinstall-canary.txtand sets an emptydependenciesobject.Reviewed by Cursor Bugbot for commit cad22ab. Bugbot is set up for automated code reviews on this repo. Configure here.