Skip to content

Migrate peerDependencies and imports from @mariozechner/* to @earendil-works/* - #2

Open
stcl-bsm wants to merge 1 commit into
iefnaf:masterfrom
stcl-bsm:migrate-earendil-works
Open

stcl-bsm wants to merge 1 commit into
iefnaf:masterfrom
stcl-bsm:migrate-earendil-works

Conversation

@stcl-bsm

Copy link
Copy Markdown

What

Migrates peerDependencies and source imports from the deprecated @mariozechner/* scope to the current @earendil-works/* scope.

Why

  • @mariozechner/pi-coding-agent carries three open security advisories (GHSA-jfgx-wxx8-mp94, GHSA-r95r-rj6r-c39x, GHSA-7v5m-pr3q-6453) and trips npm audit for every consumer.
  • pi's extension loader already aliases @mariozechner/* to its bundled @earendil-works/* packages at runtime, so the deprecated packages are pulled only to satisfy the peerDependencies and are never executed.

Changes

  • package.json: rename the three @mariozechner/* peerDependencies to @earendil-works/*
  • extensions/usage/core.ts: update the @mariozechner/pi-ai dynamic import
  • extensions/usage/index.ts: update the @mariozechner/* imports

Closes #1

@iefnaf iefnaf left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR! The actual content change is correct and clean — I verified that beyond the whitespace noise, it's exactly a 6-line rename of the @mariozechner/* scope to @earendil-works/*, matching the description. However, there are a few issues to fix before merging:

1. CRLF line endings (main issue)

Every line of every file has been rewritten with CRLF endings — that's why the diff shows +1032/−1032 instead of +6/−6. This looks unintentional (likely a Windows editor or core.autocrlf setting). Please restore LF endings, e.g.:

# after adding a .gitattributes with: * text=auto eol=lf
git add --renormalize .
git commit -m "normalize line endings"

2. Needs rebase — conflicts with master

master has moved ahead (7b8ddea: Kimi support, Codex auth fix), and merging currently conflicts in all three files (core.ts, index.ts, package.json) — mostly due to the CRLF rewrite making every line look changed. Please rebase onto the latest master.

3. package-lock.json is stale

The repo commits a lockfile, and its root-package peerDependencies section still records @mariozechner/*. Please regenerate after the rename:

npm install --package-lock-only

Once the CRLF noise is gone, the diff should shrink to ~6 lines and this should be good to merge. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Migrate peerDependencies and imports from @mariozechner/* to @earendil-works/*

2 participants