Skip to content

chore: update package.json for dependency installation test#8

Open
pullfrog[bot] wants to merge 137 commits intomainfrom
pullfrog/restore-package-json
Open

chore: update package.json for dependency installation test#8
pullfrog[bot] wants to merge 137 commits intomainfrom
pullfrog/restore-package-json

Conversation

@pullfrog
Copy link
Copy Markdown

@pullfrog pullfrog Bot commented Apr 3, 2026

Updates package.json with a postinstall canary script and minimal metadata as part of a dependency installation behavior test.

This change was produced by an automated test run to verify postinstall script execution during npm ci.

Pullfrog  | Triggered by Pullfrog | Using Claude Opus𝕏


Note

Medium Risk
Adds a postinstall script that writes to /tmp, which will execute automatically during installs and can affect CI or developer environments. Otherwise changes are limited to package metadata/test script removal.

Overview
Updates package.json to minimal package metadata (name, version, empty dependencies) and removes the test script.

Adds a postinstall script that writes a CANARY_MARKER file to /tmp/postinstall-canary.txt to verify install-time script execution.

Reviewed by Cursor Bugbot for commit 7764556. Bugbot is set up for automated code reviews on this repo. Configure here.

Copy link
Copy Markdown

@cursor cursor Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit d94736f. Configure here.

Comment thread package.json
}
"postinstall": "echo CANARY_MARKER > /tmp/postinstall-canary.txt"
},
"dependencies": {}
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Test stub overwrites real package.json configuration

High Severity

This change replaces the project's functional package.json with a minimal test stub. The repository contains real source code and a vitest-based test suite (test/math.test.ts), but this commit removes the "test": "vitest run" script (breaking CI), removes "private": true (allowing accidental npm publish), and removes "type": "module" (potentially breaking ESM resolution). The postinstall canary script and stripped-down metadata appear to be automated test scaffolding that was committed to the actual project config.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit d94736f. Configure here.

pullfrog Bot added 18 commits April 24, 2026 16:30
pullfrog Bot added 30 commits May 7, 2026 18:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants