dc
c033032e26
Follow-ups from the review of #414. The credential guard now checks each staged .npmrc rather than only the client one: the root and sas/ files are tracked policy as well, so a token pasted into either was equally one `git add -A` away. Verified by staging a token in sas/.npmrc - the hook exits 1. $RUNNER_TEMP/npmrc is removed at the end of each job that writes it, with `if: always()` so a failed job cleans up too. The root `install` script is gone: the root .npmrc sets ignore-scripts, so npm never ran it. CONTRIBUTING already spells out the per-project commands, and is now the single source. The release workflows build the published client from the same tree, so they run `check:archiver` like build.yaml does.
37 lines
1.2 KiB
JSON
37 lines
1.2 KiB
JSON
{
|
|
"name": "dcfrontend",
|
|
"version": "7.21.0",
|
|
"description": "Data Controller",
|
|
"devDependencies": {
|
|
"@nogoo9/gitleaks": "8.30.1-post.2",
|
|
"@saithodev/semantic-release-gitea": "^2.1.0",
|
|
"@semantic-release/changelog": "^6.0.3",
|
|
"@semantic-release/commit-analyzer": "13.0.1",
|
|
"@semantic-release/git": "^10.0.1",
|
|
"@semantic-release/npm": "13.1.5",
|
|
"@semantic-release/release-notes-generator": "14.1.0"
|
|
},
|
|
"overrides": {
|
|
"got": "11.8.6"
|
|
},
|
|
"scripts": {
|
|
"build-frontend": "cd client && npm run build",
|
|
"lint": "cd client && npm run lint",
|
|
"lint:fix": "cd client && npm run lint:fix",
|
|
"lint:fix:silent": "cd client && npm run lint:fix:silent",
|
|
"lint:check": "cd client && npm run lint:check",
|
|
"lint:check:silent": "cd client && npm run lint:check:silent",
|
|
"jo": "echo",
|
|
"prepare": "git rev-parse --git-dir && git config core.hooksPath ./.git-hooks && git config core.autocrlf false || true"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://git.datacontroller.io/dc/dc.git"
|
|
},
|
|
"private": true,
|
|
"//": [
|
|
"Readme",
|
|
"We must set private: true so that semantic-release/npm plugin will update the package.json version but not try to release it as NPM package"
|
|
]
|
|
}
|