| Age | Commit message (Collapse) | Author |
|---|
|
We bundle our deps, but we don't need to bundle docs, changelogs,
editorconfigs, test coverage reports, .github workflow definitions,
lint configurations, and all the rest, which we never use.
This cuts about 10% off of our publish artifact file size.
```
$ ls -laF npm-7.16.0-*.tgz
-rw-r--r-- 1 isaacs staff 7174497 Jun 3 13:01 npm-7.16.0-release-next.tgz
-rw-r--r-- 1 isaacs staff 6782377 Jun 3 13:00 npm-7.16.0-trim-node-modules.tgz
$ ls -laF npm-7.16.0-*.tar
-rw-r--r-- 1 isaacs staff 19020288 Jun 3 13:01 npm-7.16.0-release-next.tar
-rw-r--r-- 1 isaacs staff 17474048 Jun 3 13:00 npm-7.16.0-trim-node-modules.tar
```
PR-URL: https://github.com/npm/cli/pull/3362
Credit: @isaacs
Close: #3362
Reviewed-by: @nlf
|
|
First self-install!
|
|
Reinstall everything from a clean node_modules and package-lock.json
state.
Re-generate list of bundleDependencies and node_modules/.gitignore with
a script that does the right thing based on actual dependency state.
|
|
Fixes: https://github.com/kemitchell/validate-npm-package-license.js/issues/8
Credit: @Gudahtt
|
|
|
|
Dependency version bumps.
Credit: @kemitchell
|
|
Documents obviously aren't executable, so drop +x flag
PR-URL: https://github.com/npm/npm/pull/16548
Credit: @metux
Reviewed-By: @iarna
|
|
|
|
spdx-correct@1.0.2
spdx-license-ids@1.2.0
spdx-expression-parse@1.0.2
spdx-exceptions@1.0.4
spdx-license-ids@1.2.0
|
|
Restore the ability to do one-shot upgrades from the versions of npm
bundled with Node 0.8 to npm@3, which simplifies using Travis with old
Node and new npm, for compatibility testing purposes. Older versions of
npm repack packages on install, which works poorly with the way npm@3
handles bundledDependencies with flat trees.
Fixes: #9668
PR-URL: https://github.com/npm/npm/pull/9981
|
|
Support new version of `validate-npm-package-license`.
|
|
|
|
"license" now supports UNLICEN[SC]ED and "SEE LICEN[SC]E IN <filename>"
courtesy @kemitchell
PR-URL: https://github.com/npm/normalize-package-data/pull/65
|
