@@ -186,3 +186,4 @@ "use strict"; | ||
| const packageNames = new Set(); | ||
| for (const [key, snapshot] of Object.entries(data.packages)) { | ||
| // pnpm omits the packages block for workspace-only lockfiles (no external deps) | ||
| for (const [key, snapshot] of Object.entries(data.packages ?? {})) { | ||
| let packageNameObj; | ||
@@ -368,3 +369,4 @@ const originalPackageName = extractNameFromKey(key, isV5); | ||
| const results = []; | ||
| Object.keys(data.packages).forEach((key) => { | ||
| // pnpm omits the packages block for workspace-only lockfiles (no external deps) | ||
| Object.keys(data.packages ?? {}).forEach((key) => { | ||
| const snapshot = data.packages[key]; | ||
@@ -371,0 +373,0 @@ const nodes = keyMap.get(key); |
@@ -228,15 +228,19 @@ "use strict"; | ||
| const preInstallCommand = pmCommands.preInstall; | ||
| // Omit peer dependencies from the temp install. `ensurePackage` puts the | ||
| // Keep peer dependencies out of the temp install. `ensurePackage` puts the | ||
| // workspace's `node_modules` on `NODE_PATH`, so a loaded package resolves its | ||
| // peers from the workspace instead of pulling its own (possibly incompatible) | ||
| // copies into the temp dir. | ||
| const omitPeerDependenciesFlag = packageManager === 'npm' || packageManager === 'bun' | ||
| ? '--omit=peer' | ||
| : packageManager === 'pnpm' | ||
| ? '--config.auto-install-peers=false' | ||
| : ''; | ||
| // | ||
| // npm needs `--legacy-peer-deps` rather than `--omit=peer`: npm marks a package | ||
| // as a peer if anything in the tree peer-depends on it, so `--omit=peer` also | ||
| // prunes packages that are real dependencies. Bun's `--omit=peer` does not. | ||
| const skipPeerDependenciesFlags = { | ||
| npm: '--legacy-peer-deps', | ||
| bun: '--omit=peer', | ||
| pnpm: '--config.auto-install-peers=false', | ||
| }; | ||
| const installCommand = [ | ||
| pmCommands.addDev, | ||
| `${pkg}@${requiredVersion}`, | ||
| omitPeerDependenciesFlag, | ||
| skipPeerDependenciesFlags[packageManager], | ||
| pmCommands.ignoreScriptsFlag, | ||
@@ -243,0 +247,0 @@ ] |
+13
-13
| { | ||
| "name": "nx", | ||
| "version": "23.2.0-beta.3", | ||
| "version": "23.2.0-beta.4", | ||
| "private": false, | ||
@@ -64,7 +64,7 @@ "type": "commonjs", | ||
| "asynckit": "0.4.0", | ||
| "axios": "1.16.1", | ||
| "axios": "1.18.1", | ||
| "balanced-match": "4.0.3", | ||
| "base64-js": "1.5.1", | ||
| "bl": "4.1.0", | ||
| "brace-expansion": "5.0.6", | ||
| "brace-expansion": "5.0.8", | ||
| "buffer": "5.7.1", | ||
@@ -185,12 +185,12 @@ "bundle-name": "4.1.0", | ||
| "optionalDependencies": { | ||
| "@nx/nx-darwin-arm64": "23.2.0-beta.3", | ||
| "@nx/nx-darwin-x64": "23.2.0-beta.3", | ||
| "@nx/nx-freebsd-x64": "23.2.0-beta.3", | ||
| "@nx/nx-linux-arm-gnueabihf": "23.2.0-beta.3", | ||
| "@nx/nx-linux-arm64-gnu": "23.2.0-beta.3", | ||
| "@nx/nx-linux-arm64-musl": "23.2.0-beta.3", | ||
| "@nx/nx-linux-x64-gnu": "23.2.0-beta.3", | ||
| "@nx/nx-linux-x64-musl": "23.2.0-beta.3", | ||
| "@nx/nx-win32-arm64-msvc": "23.2.0-beta.3", | ||
| "@nx/nx-win32-x64-msvc": "23.2.0-beta.3" | ||
| "@nx/nx-darwin-arm64": "23.2.0-beta.4", | ||
| "@nx/nx-darwin-x64": "23.2.0-beta.4", | ||
| "@nx/nx-freebsd-x64": "23.2.0-beta.4", | ||
| "@nx/nx-linux-arm-gnueabihf": "23.2.0-beta.4", | ||
| "@nx/nx-linux-arm64-gnu": "23.2.0-beta.4", | ||
| "@nx/nx-linux-arm64-musl": "23.2.0-beta.4", | ||
| "@nx/nx-linux-x64-gnu": "23.2.0-beta.4", | ||
| "@nx/nx-linux-x64-musl": "23.2.0-beta.4", | ||
| "@nx/nx-win32-arm64-msvc": "23.2.0-beta.4", | ||
| "@nx/nx-win32-x64-msvc": "23.2.0-beta.4" | ||
| }, | ||
@@ -197,0 +197,0 @@ "nx-migrations": { |
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 3 instances
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 4 instances
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
17209861
0101477
0.01%658
-0.15%+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
Updated
Updated