Skip to content

ci: guard dependency-free npm package - #1

Merged
PHPCraftdream merged 2 commits into
mainfrom
ci/license-compliance
Nov 2, 2026
Merged

PHPCraftdream merged 2 commits into
mainfrom
ci/license-compliance

Conversation

@PHPCraftdream

@PHPCraftdream PHPCraftdream commented Oct 28, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Fail CI if the currently dependency-free root npm package acquires declared dependencies or workspaces without review.
  • Detect common new dependency manifests and symlinks anywhere in the checkout and require review before they can be added.
  • Exercise the guard with positive and negative assertions.

Limitations

This guard cannot identify every possible vendored component, unrecognized manifest, or external tool; it is not a legal compliance guarantee.

Verification

GitHub CI passed 7/7 checks at bf092f9db3723b2a489c74269d3838da7740ae93. No local tests or builds were run.

🤖 Generated with Claude Code

PHPCraftdream and others added 2 commits October 28, 2026 15:24
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@PHPCraftdream
PHPCraftdream marked this pull request as ready for review November 2, 2026 12:31
@PHPCraftdream
PHPCraftdream merged commit d01d771 into main Nov 2, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant