Skip to content
This repository has been archived by the owner on May 3, 2024. It is now read-only.

feat(danger): validate lockfiles #7

Merged
merged 6 commits into from
Jan 14, 2020
Merged

Conversation

Francois-Esquire
Copy link
Contributor

@Francois-Esquire Francois-Esquire commented Jan 1, 2020

Extends danger.js to validate lock files, hosts and protocol of package resolutions are checked.
Adding lockfile-lint to run on test:lint script.

@Francois-Esquire Francois-Esquire requested a review from a team January 1, 2020 18:56
Copy link
Contributor

@JAdshead JAdshead left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like a good idea and might be worth including on our other packages if everyone agrees.

scripts/dangers/keep-package-and-lock-in-sync.js Outdated Show resolved Hide resolved
scripts/dangers/keep-package-and-lock-in-sync.js Outdated Show resolved Hide resolved
@anescobar1991
Copy link
Member

Should we just add lockfile-lint to the npm test script and not rely on danger to run it?

@nellyk nellyk self-requested a review January 8, 2020 11:59
@nellyk
Copy link
Contributor

nellyk commented Jan 8, 2020

Should we just add lockfile-lint to the npm test script and not rely on danger to run it?

I think i would prefer it staying with danger as we are validating whether the package-lock submitted via the pr is valid. It would be still be captured.

Mike Tobia and others added 5 commits January 13, 2020 12:32
Co-Authored-By: Jonny Adshead <JAdshead@users.noreply.github.com>
Co-Authored-By: Jonny Adshead <JAdshead@users.noreply.github.com>
@Francois-Esquire
Copy link
Contributor Author

@nellyk @anescobar1991 updated to use command-line tool per team discussion.

package.json Outdated Show resolved Hide resolved
@JAdshead JAdshead merged commit 1e560f7 into master Jan 14, 2020
@JAdshead JAdshead deleted the feature/lockfile-validation branch January 14, 2020 18:15
@nellyk nellyk added the enhancement New feature or request label Apr 8, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants