Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
27 commits
Select commit Hold shift + click to select a range
ba729c0
test: write package.json for dependency install canary test
pullfrog[bot] Apr 12, 2026
c8fd320
test: update package.json for dependency installation test
pullfrog[bot] Apr 23, 2026
f1dcc48
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] Apr 23, 2026
0b4efc4
chore: update package.json for dependency install test
pullfrog[bot] May 8, 2026
ab76b76
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] May 8, 2026
4aec90a
chore: update package.json for dependency install test
pullfrog[bot] May 9, 2026
98d1c50
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] May 9, 2026
3522b7d
test: write package.json for dependency installation test
pullfrog[bot] May 11, 2026
4499f0f
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] May 11, 2026
c77f7a1
test: dependency installation canary check
pullfrog[bot] May 11, 2026
17fb087
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] May 11, 2026
7e41346
chore: update package.json for dependency install test
pullfrog[bot] May 11, 2026
fb03bd2
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] May 11, 2026
3ddf624
test: update package.json for dependency installation test
pullfrog[bot] May 13, 2026
68032f9
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] May 13, 2026
0ca00e3
chore: update package.json for dependency install test
pullfrog[bot] May 13, 2026
220247c
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] May 13, 2026
88bf10a
test: update package.json for dependency install canary test
pullfrog[bot] May 14, 2026
767a1ad
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] May 14, 2026
25c8721
chore: update package.json for dependency install test
pullfrog[bot] May 14, 2026
e14ecf2
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] May 14, 2026
a7fa1d7
chore: update package.json for dependency install test
pullfrog[bot] May 20, 2026
62cf3e0
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] May 20, 2026
4681778
test: update package.json for dependency installation test
pullfrog[bot] May 20, 2026
ff7f885
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] May 20, 2026
2c5e092
chore: update package.json for dep install test
pullfrog[bot] May 20, 2026
c2aec6c
Merge remote-tracking branch 'origin/pullfrog/test-dep-install' into …
pullfrog[bot] May 20, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 5 additions & 5 deletions package.json
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
{
"name": "test-repo",
"private": true,
"type": "module",
"name": "test-pkg",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Name mismatch between package.json and package-lock.json

Medium Severity

The package.json declares "name": "test-pkg" while the new package-lock.json declares "name": "test-repo". This mismatch causes npm to emit warnings and may lead to unexpected behavior during dependency installation—the very operation this canary test is meant to verify.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 767a1ad. Configure here.

"version": "1.0.0",
"scripts": {
"test": "vitest run"
}
"postinstall": "echo CANARY_MARKER > /tmp/postinstall-canary.txt"
},
"dependencies": {}
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Test package.json overwrites real project configuration

High Severity

The root package.json appears to have been overwritten with a canary-test-only version. This removes "private": true (risking accidental npm publish), "type": "module" (breaking existing ES module imports in src/ and test/), and the "test": "vitest run" script (breaking npm test). The existing test/math.test.ts imports from vitest and uses ES module syntax, which will no longer work. Per the PR description, this file was "overwritten as part of the test task" — it looks like a test artifact that was accidentally committed.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit ab76b76. Configure here.

}