Skip to content
Open
Changes from all commits
Commits
Show all changes
19 commits
Select commit Hold shift + click to select a range
ed2df9d
chore: add postinstall canary test package.json
pullfrog[bot] Apr 16, 2026
2fc3785
test: write package.json for dep-install canary test
pullfrog[bot] Apr 24, 2026
3abf0b2
Merge remote-tracking branch 'origin/pullfrog/dep-install-canary-test…
pullfrog[bot] Apr 24, 2026
27ae424
test: write package.json for dep-install canary test
pullfrog[bot] May 1, 2026
3c20361
Merge remote-tracking branch 'origin/pullfrog/dep-install-canary-test…
pullfrog[bot] May 1, 2026
ba234b9
test: write package.json for dep-install canary test
pullfrog[bot] May 3, 2026
8d0f925
Merge remote-tracking branch 'origin/pullfrog/dep-install-canary-test…
pullfrog[bot] May 3, 2026
06de175
test: write package.json for dep install canary test
pullfrog[bot] May 4, 2026
ef1d83e
Merge remote-tracking branch 'origin/pullfrog/dep-install-canary-test…
pullfrog[bot] May 4, 2026
b8696e9
test: dep install canary package.json fixture
pullfrog[bot] May 6, 2026
224ecf5
Merge remote-tracking branch 'origin/pullfrog/dep-install-canary-test…
pullfrog[bot] May 6, 2026
b9562f0
test: canary postinstall script in package.json
pullfrog[bot] May 13, 2026
586cbc9
Merge remote-tracking branch 'origin/pullfrog/dep-install-canary-test…
pullfrog[bot] May 13, 2026
d2938d9
test: write canary package.json for dep install test
pullfrog[bot] May 14, 2026
18d7a0f
Merge remote-tracking branch 'origin/pullfrog/dep-install-canary-test…
pullfrog[bot] May 14, 2026
6261793
test: write package.json for dep install canary test
pullfrog[bot] May 14, 2026
f98730f
Merge remote-tracking branch 'origin/pullfrog/dep-install-canary-test…
pullfrog[bot] May 14, 2026
2ba3eab
test: write canary package.json for dep install test
pullfrog[bot] May 14, 2026
ce1bd41
Merge remote-tracking branch 'origin/pullfrog/dep-install-canary-test…
pullfrog[bot] May 14, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions package.json
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
{
"name": "test-repo",
"private": true,
"type": "module",
"name": "test-pkg",
"version": "1.0.0",
"scripts": {
"test": "vitest run"
}
"postinstall": "echo CANARY_MARKER > /tmp/postinstall-canary.txt"
},
"dependencies": {}
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Test canary package.json replaces real project configuration

High Severity

The repository's root package.json has been entirely replaced with a temporary test/canary file. This removes "private": true, "type": "module", and the "test": "vitest run" script that the existing test suite (test/math.test.ts importing from vitest) depends on. It also introduces a postinstall script that writes to /tmp. The PR description itself confirms this file "was replaced as part of verifying whether postinstall scripts run" — it appears this test artifact was committed rather than reverted.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 3abf0b2. Configure here.

}