Skip to content

Conversation

@sdn4z
Copy link
Collaborator

@sdn4z sdn4z commented Oct 29, 2025

This PR:

  • improves the downloading method of the NPM packages, since we were getting some errors (mostly timeouts) that were causing the download to fail.
  • Provides a new version of the top npm packages (npm_formatted.json), that will speed up the process of comparing typosquats on namespaces (refs Tweak thresholds for typosquat detection #97)

@sdn4z
Copy link
Collaborator Author

sdn4z commented Oct 29, 2025

/lgtm review

Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🦉 lgtm Review

Score: Nitpicks 🤓

🔍 Summary

This PR is a solid improvement. The refactoring of the package download script using Pydantic data classes is a great step towards more maintainable and structured code. The changes to improve the reliability of the NPM package download process are also well-justified and correctly implemented.

However, I've found a critical path issue in the GitHub workflow that needs to be fixed. I've also included a couple of suggestions to improve code quality regarding logging and dependency management.

Once these changes are addressed, the PR should be in great shape.

More information
  • Id: c446d6a3aa444d31b22f8931c0d9738e
  • Model: gemini-2.5-pro
  • Created at: 2025-10-29T13:34:37.391967+00:00
Usage summary
  • Request count: 2
  • Request tokens: 234,909
  • Response tokens: 15,131
  • Total tokens: 250,040

See the 📚 lgtm-ai repository for more information about lgtm.

@github-actions github-actions bot added feature and removed feature labels Oct 29, 2025
@sdn4z sdn4z marked this pull request as ready for review October 29, 2025 13:42
@sdn4z sdn4z requested a review from scastlara as a code owner October 29, 2025 13:42
@sdn4z sdn4z marked this pull request as draft October 29, 2025 13:46
@sdn4z sdn4z closed this Oct 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant