Skip to content

Conversation

SCARPxVeNOM
Copy link

  • Remove @scarf/scarf from package.json and swagger-ui-dist-package/package.json
  • Remove scarf analytics documentation from all README files
  • Update package-lock.json to reflect dependency removal

Benefits

  • Improved compatibility with pnpm and bun
  • Better security posture for users using --ignore-scripts
  • Cleaner dependency tree
  • No functional impact on swagger-ui functionality

Testing

  • Verified no scarf references remain in the codebase
  • Confirmed package.json files are properly updated
  • Validated package-lock.json reflects changes

- Remove @scarf/scarf from package.json and swagger-ui-dist-package/package.json
- Remove scarf analytics documentation from all README files
- Update package-lock.json to reflect dependency removal

This change improves compatibility with pnpm and bun package managers
that block lifecycle scripts by default, and addresses security concerns
with users who use --ignore-scripts to harden against supply chain attacks.

The analytics data was becoming unreliable when scripts were blocked,
making it less useful for maintainers.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant