Skip to content

chore: use yarn only; drop package-lock.json - #10

Merged
snakajima merged 1 commit into
mainfrom
chore/yarn-only
Oct 13, 2026
Merged

snakajima merged 1 commit into
mainfrom
chore/yarn-only

Conversation

@snakajima

@snakajima snakajima commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Summary

The repo had both package-lock.json and yarn.lock. Remove package-lock.json and make yarn the only package manager.

  • Delete package-lock.json. .prettierignore now names yarn.lock instead.
  • Add vite (^8.3.2) as a devDependency. vitest 5 declares vite as a peer dependency. npm installed it automatically, but yarn v1 does not, so with yarn alone yarn test failed with Cannot find package 'vite'. yarn.lock locks it at 8.3.4 (the range floor ^8.3.2 is the version npm had installed); tests and the smoke test ran on 8.3.4.
  • CI: cache: yarn, yarn install --frozen-lockfile, and scripts run via yarn.
  • prepack, CLAUDE.md, the README's development section and code comments now use yarn.
  • scripts/smoke.sh and the README's user install commands (npm install avatarscript / npx) stay on npm on purpose: they model an end user installing the published package.

Test plan

  • yarn install --frozen-lockfile
  • yarn format:check / yarn lint / yarn typecheck
  • yarn test (80/80)
  • scripts/smoke.sh avatars/ani (package smoke passed)

🤖 Generated with Claude Code

work in avatarscript

- Remove package-lock.json; yarn.lock is the single lockfile.
- Add vite as a devDependency: vitest 5 lists it as a peer, which npm
  installed automatically but yarn v1 does not.
- CI installs with `yarn install --frozen-lockfile` and runs scripts via yarn.
- prepack, CLAUDE.md, README (development) and comments use yarn.
- scripts/smoke.sh and the README's user install commands keep npm: they
  model an end user installing the published package.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedvite@​8.3.4991008298100

View full report

@snakajima
snakajima merged commit 5327e09 into main Oct 13, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant