fix: resolve pnpm audit vulnerabilities by removing @pnpm/workspace.* deps (#1422)

This commit is contained in:
Felix Weinberger 2026-01-23 16:30:29 +00:00 • committed by GitHub
commit 11e326692b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -1,12 +1,18 @@
import { OptionDefaults } from 'typedoc';
import { findWorkspacePackages } from '@pnpm/workspace.find-packages';
import { readWorkspaceManifest } from '@pnpm/workspace.read-manifest';
import fg from 'fast-glob';
import { readFileSync } from 'node:fs';
import { join } from 'node:path';
// Read workspace manifest and find all public packages
const workspaceManifest = await readWorkspaceManifest(process.cwd());
const packages = await findWorkspacePackages(process.cwd(), {
patterns: workspaceManifest?.packages
// Find all package.json files in packages/*/ and build package list
const packageJsonPaths = await fg('packages/*/package.json', {
cwd: process.cwd()
});
const packages = packageJsonPaths.map(p => {
const rootDir = join(process.cwd(), p.replace('/package.json', ''));
const manifest = JSON.parse(readFileSync(join(process.cwd(), p), 'utf8'));
return { rootDir, manifest };
});
const publicPackages = packages.filter(p => p.manifest.private !== true);
const entryPoints = publicPackages.map(p => p.rootDir);