vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-06 08:20:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(deps): keep plugin ownership records live (#71331)

Browse Source
This commit is contained in:
Vincent Koc
2026-04-24 19:15:12 -07:00
committed by GitHub
parent f550aa7622
commit f9ac92d1cc
2 changed files with 64 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
scripts/sbom-risk-report.mjs
View File

@@ -184,13 +184,17 @@ export function collectSbomRiskReport(params = {}) {
return left.importer.localeCompare(right.importer);
});
const rootDependencyNames = new Set(rootDependencies.map((dependency) => dependency.name));
const workspaceDependencyNames = new Set(
Object.values(lockfile.importers ?? {}).flatMap((record) =>
normalizeDependencies(record).map((dependency) => dependency.name),
),
);
const ownershipGaps = rootDependencies
.filter((dependency) => !ownershipFor(dependencyOwnership, dependency.name))
.map((dependency) => dependency.name)
.toSorted(compareStrings);
const staleOwnershipRecords = Object.keys(dependencyOwnership.dependencies ?? {})
.filter((name) => !rootDependencyNames.has(name))
.filter((name) => !workspaceDependencyNames.has(name))
.toSorted(compareStrings);
const ownershipWarnings = rootDependencyRows
.filter(