Skip to content

chore: update package.json for dependency installation test#8

Open
pullfrog[bot] wants to merge 27 commits intomainfrom
pullfrog/restore-package-json
Open

chore: update package.json for dependency installation test#8
pullfrog[bot] wants to merge 27 commits intomainfrom
pullfrog/restore-package-json

Conversation

@pullfrog
Copy link
Copy Markdown

@pullfrog pullfrog Bot commented Apr 3, 2026

Updates package.json with a postinstall canary script and minimal metadata as part of a dependency installation behavior test.

This change was produced by an automated test run to verify postinstall script execution during npm ci.

Pullfrog  | Triggered by Pullfrog | Using Claude Opus𝕏


Note

Medium Risk
Adds a postinstall script that writes to /tmp, which will execute automatically during installs and can affect CI/build environments. Otherwise the change is limited to package metadata and removal of the test script.

Overview
Updates package.json to a minimal install-focused setup: renames the package, adds a version, and removes private/type metadata and the test script.

Adds a postinstall canary script that writes CANARY_MARKER to /tmp/postinstall-canary.txt and sets an empty dependencies object.

Reviewed by Cursor Bugbot for commit cad22ab. Bugbot is set up for automated code reviews on this repo. Configure here.

Copy link
Copy Markdown

@cursor cursor Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit d94736f. Configure here.

Comment thread package.json
}
"postinstall": "echo CANARY_MARKER > /tmp/postinstall-canary.txt"
},
"dependencies": {}
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Test stub overwrites real package.json configuration

High Severity

This change replaces the project's functional package.json with a minimal test stub. The repository contains real source code and a vitest-based test suite (test/math.test.ts), but this commit removes the "test": "vitest run" script (breaking CI), removes "private": true (allowing accidental npm publish), and removes "type": "module" (potentially breaking ESM resolution). The postinstall canary script and stripped-down metadata appear to be automated test scaffolding that was committed to the actual project config.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit d94736f. Configure here.

pullfrog Bot added 16 commits April 24, 2026 16:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants