0
0
mirror of https://github.com/go-gitea/gitea.git synced 2025-10-12 12:31:16 +02:00

Use bundled version of spectral (#35573)

To reduce the risk of npm supply chain attacks and to speed up
dependency installation, I've
[bundled](https://github.com/silverwind/spectral-cli-bundle) the
spectral package into a zero-dependency module. The upstream package is
pretty dead currently, so I expect to keep up with their updates.

The package
[exports](de05948c53/package.json (L9))
a `spectral` bin script, so `pnpm exec spectral` continues to work
as-is.

In total, this removes 86 dependencies from the npm dependency tree.
This commit is contained in:
silverwind 2025-10-04 00:25:09 +02:00 committed by GitHub
parent 17c8aa6587
commit 6589326e96
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 15 additions and 814 deletions

View File

@ -67,7 +67,6 @@
"devDependencies": {
"@eslint-community/eslint-plugin-eslint-comments": "4.5.0",
"@playwright/test": "1.55.1",
"@stoplight/spectral-cli": "6.15.0",
"@stylistic/eslint-plugin": "5.4.0",
"@stylistic/stylelint-plugin": "4.0.0",
"@types/codemirror": "5.60.16",
@ -102,6 +101,7 @@
"material-icon-theme": "5.27.0",
"nolyfill": "1.0.44",
"postcss-html": "1.8.0",
"spectral-cli-bundle": "1.0.3",
"stylelint": "16.24.0",
"stylelint-config-recommended": "17.0.0",
"stylelint-declaration-block-no-ignored-properties": "2.8.0",

827
pnpm-lock.yaml generated

File diff suppressed because it is too large Load Diff