Skip to content

Root package.json runtime deps have major version drift vs catalog #186

Description

@bobbyjohnstx

Problem

Root package.json (private) has runtime dependencies with major version drift vs the workspace catalog:

  • diff: 9.0.0 in root vs 8.0.2 in catalog
  • typescript: 6.0.3 in root vs 5.8.2 in catalog
  • hono: 4.12.27 in root vs 4.10.7 in catalog
  • dompurify: 3.4.11 in root vs 3.3.1 in catalog

Root also has overrides (lines 147-154) that force specific versions, adding another layer of version confusion. Major version discrepancies could cause runtime mismatches between packages.

Fix

  • Reconcile the 4 major-version-drifted deps (update catalog or remove root overrides)
  • Audit whether root-level runtime deps are needed or should move to packages/tinycode
  • Check if overrides serve a security purpose vs being stale

Priority

MEDIUM


From: contributor readiness review (architect + critic validated)

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions