Zoltan Kochan
d3ebbedc4a
Git preparation was gated only while fetching a package. Once an approved project placed prepared files in the shared store, a different project could link those files without consulting its own allowBuilds policy. Persist whether preparation was required in each git package's store-index row and check the active project policy before warm-store reuse. Legacy rows without the marker are reused only with explicit approval; otherwise they go through the existing cold fetch and preparation gate. Revalidate in-process git fetch results as well so a long-lived store controller cannot carry approval across policy changes. Pass the canonical lockfile resolution ID into both git fetch paths so the allowBuilds identity and suggested key stay byte-for-byte exact. Mirror the marker and warm-reuse gate in pacquet using the shared msgpackr-compatible store format. Closes pnpm/pnpm#13965.
90 lines
2.8 KiB
JSON
90 lines
2.8 KiB
JSON
{
|
|
"name": "@pnpm/installing.package-requester",
|
|
"version": "1102.1.11",
|
|
"description": "Concurrent downloader of npm-compatible packages",
|
|
"keywords": [
|
|
"pnpm",
|
|
"pnpm11",
|
|
"npm",
|
|
"resolver"
|
|
],
|
|
"license": "MIT",
|
|
"funding": "https://opencollective.com/pnpm",
|
|
"repository": "https://github.com/pnpm/pnpm/tree/main/pnpm11/installing/package-requester",
|
|
"homepage": "https://github.com/pnpm/pnpm/tree/main/pnpm11/installing/package-requester#readme",
|
|
"bugs": {
|
|
"url": "https://github.com/pnpm/pnpm/issues"
|
|
},
|
|
"type": "module",
|
|
"main": "lib/index.js",
|
|
"types": "lib/index.d.ts",
|
|
"exports": {
|
|
".": "./lib/index.js"
|
|
},
|
|
"files": [
|
|
"lib",
|
|
"!*.map"
|
|
],
|
|
"scripts": {
|
|
"start": "tsgo --watch",
|
|
"lint": "eslint \"src/**/*.ts\" \"test/**/*.ts\"",
|
|
"test": "pn compile && pn .test",
|
|
"prepublishOnly": "tsgo --build",
|
|
"compile": "tsgo --build && pn lint --fix",
|
|
".test": "cross-env NODE_OPTIONS=\"$NODE_OPTIONS --experimental-vm-modules --disable-warning=ExperimentalWarning --disable-warning=DEP0169\" jest"
|
|
},
|
|
"dependencies": {
|
|
"@pnpm/config.package-is-installable": "workspace:*",
|
|
"@pnpm/core-loggers": "workspace:*",
|
|
"@pnpm/deps.path": "workspace:*",
|
|
"@pnpm/error": "workspace:*",
|
|
"@pnpm/exec.prepare-package": "workspace:*",
|
|
"@pnpm/fetching.fetcher-base": "workspace:*",
|
|
"@pnpm/fetching.pick-fetcher": "workspace:*",
|
|
"@pnpm/fs.graceful-fs": "workspace:*",
|
|
"@pnpm/hooks.types": "workspace:*",
|
|
"@pnpm/resolving.resolver-base": "workspace:*",
|
|
"@pnpm/store.cafs": "workspace:*",
|
|
"@pnpm/store.controller-types": "workspace:*",
|
|
"@pnpm/store.index": "workspace:*",
|
|
"@pnpm/types": "workspace:*",
|
|
"detect-libc": "catalog:",
|
|
"load-json-file": "catalog:",
|
|
"p-defer": "catalog:",
|
|
"p-limit": "catalog:",
|
|
"p-queue": "catalog:",
|
|
"promise-share": "catalog:",
|
|
"ramda": "catalog:",
|
|
"semver": "catalog:",
|
|
"ssri": "catalog:"
|
|
},
|
|
"peerDependencies": {
|
|
"@pnpm/logger": "catalog:",
|
|
"@pnpm/worker": "workspace:^"
|
|
},
|
|
"devDependencies": {
|
|
"@jest/globals": "catalog:",
|
|
"@pnpm/installing.client": "workspace:*",
|
|
"@pnpm/installing.package-requester": "workspace:*",
|
|
"@pnpm/logger": "workspace:*",
|
|
"@pnpm/store.cafs-types": "workspace:*",
|
|
"@pnpm/store.create-cafs-store": "workspace:*",
|
|
"@pnpm/test-fixtures": "workspace:*",
|
|
"@pnpm/testing.mock-agent": "workspace:*",
|
|
"@pnpm/testing.registry-mock": "workspace:*",
|
|
"@types/normalize-path": "catalog:",
|
|
"@types/ramda": "catalog:",
|
|
"@types/semver": "catalog:",
|
|
"@types/ssri": "catalog:",
|
|
"delay": "catalog:",
|
|
"normalize-path": "catalog:",
|
|
"tempy": "catalog:"
|
|
},
|
|
"engines": {
|
|
"node": ">=22.13"
|
|
},
|
|
"jest": {
|
|
"preset": "@pnpm/jest-config/with-registry"
|
|
}
|
|
}
|