Skip to content

Commit 137d46a

Browse files
silverwindrossigee
authored andcommitted
Use bundled version of spectral (go-gitea#35573)
To reduce the risk of npm supply chain attacks and to speed up dependency installation, I've [bundled](https://github.com/silverwind/spectral-cli-bundle) the spectral package into a zero-dependency module. The upstream package is pretty dead currently, so I expect to keep up with their updates. The package [exports](https://github.com/silverwind/spectral-cli-bundle/blob/de05948c53a0a6f9690cdf65d35c3fc3324a583c/package.json#L9) a `spectral` bin script, so `pnpm exec spectral` continues to work as-is. In total, this removes 86 dependencies from the npm dependency tree.
1 parent 0d7d00a commit 137d46a

File tree

2 files changed

+15
-814
lines changed

2 files changed

+15
-814
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,6 @@
6767
"devDependencies": {
6868
"@eslint-community/eslint-plugin-eslint-comments": "4.5.0",
6969
"@playwright/test": "1.55.1",
70-
"@stoplight/spectral-cli": "6.15.0",
7170
"@stylistic/eslint-plugin": "5.4.0",
7271
"@stylistic/stylelint-plugin": "4.0.0",
7372
"@types/codemirror": "5.60.16",
@@ -102,6 +101,7 @@
102101
"material-icon-theme": "5.27.0",
103102
"nolyfill": "1.0.44",
104103
"postcss-html": "1.8.0",
104+
"spectral-cli-bundle": "1.0.3",
105105
"stylelint": "16.24.0",
106106
"stylelint-config-recommended": "17.0.0",
107107
"stylelint-declaration-block-no-ignored-properties": "2.8.0",

0 commit comments

Comments
 (0)