Skip to content

chore: remove orphan npm package-lock.json#51

Merged
Skanislav merged 1 commit into
devfrom
chore/delete-orphan-npm-lockfile
May 19, 2026
Merged

chore: remove orphan npm package-lock.json#51
Skanislav merged 1 commit into
devfrom
chore/delete-orphan-npm-lockfile

Conversation

@Skanislav

Copy link
Copy Markdown
Contributor

Summary

  • The repo is pnpm-only (root preinstall blocks npm). This apps/hola-modern/package-lock.json was committed by accident and is the source of 3 Dependabot alerts (vite 8.x transitive chain).
  • No references to this file anywhere in the repo (searched *.json, *.yml, *.sh, *.ts).
  • Clears Dependabot alerts 3, 4, 5.

Test plan

  • pnpm install still resolves cleanly
  • pnpm --filter hola-modern build unchanged
  • Dependabot re-scan drops the 3 alerts

🤖 Generated with Claude Code

The repo is pnpm-only (root preinstall blocks npm). This lockfile
was committed by accident and is the source of 3 Dependabot alerts
(vite 8.x transitive chain) that are otherwise resolved by pnpm's
workspace lockfile.

Clears dependabot alerts 3, 4, 5.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@Skanislav Skanislav merged commit 36294ca into dev May 19, 2026
6 checks passed
@Skanislav Skanislav deleted the chore/delete-orphan-npm-lockfile branch May 19, 2026 12:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant