Skip to content

Root package.json runtime deps have major version drift vs catalog #186

Description

@bobbyjohnstx

Problem

Root package.json (private) has runtime dependencies with major version drift vs the workspace catalog:

  • diff: 9.0.0 in root vs 8.0.2 in catalog
  • typescript: 6.0.3 in root vs 5.8.2 in catalog
  • hono: 4.12.27 in root vs 4.10.7 in catalog
  • dompurify: 3.4.11 in root vs 3.3.1 in catalog

Root also has overrides (lines 147-154) that force specific versions, adding another layer of version confusion. Major version discrepancies could cause runtime mismatches between packages.

Fix

  • Reconcile the 4 major-version-drifted deps (update catalog or remove root overrides)
  • Audit whether root-level runtime deps are needed or should move to packages/tinycode
  • Check if overrides serve a security purpose vs being stale

Priority

MEDIUM


From: contributor readiness review (architect + critic validated)

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions