Files
openclaw/scripts/lib/dependency-ownership.json
Peter Steinberger 8fe50a2136 build: classify release dependency ownership
Classify release dependency ownership metadata so release evidence no longer reports current root dependencies as missing ownership metadata. Also recognizes command-explainer package-file lookups for tree-sitter-bash.

Verification: jq empty scripts/lib/dependency-ownership.json; node scripts/dependency-ownership-surface-report.mjs --check; node scripts/root-dependency-ownership-audit.mjs --check; targeted Vitest for root dependency ownership and ownership surface reports; git diff --check; autoreview clean; PR CI green including Real behavior proof.
2026-05-30 22:04:54 +01:00

294 lines
8.0 KiB
JSON

{
"schemaVersion": 1,
"dependencies": {
"@agentclientprotocol/sdk": {
"owner": "core:mcp-acp",
"class": "core-runtime",
"risk": ["protocol-client"]
},
"@anthropic-ai/sdk": {
"owner": "provider:anthropic",
"class": "default-runtime-initially",
"risk": ["provider-sdk", "network"]
},
"@clack/core": {
"owner": "core:cli",
"class": "core-runtime",
"risk": ["interactive-cli"]
},
"@clack/prompts": {
"owner": "core:cli",
"class": "core-runtime",
"risk": ["interactive-cli"]
},
"@lydell/node-pty": {
"owner": "core:tui-terminal",
"class": "core-runtime",
"risk": ["native", "terminal"]
},
"@earendil-works/pi-tui": {
"owner": "capability:tui-pi",
"class": "tui-runtime",
"risk": ["tui-runtime"]
},
"@google/genai": {
"owner": "provider:google",
"class": "default-runtime-initially",
"risk": ["provider-sdk", "network", "realtime"]
},
"@grammyjs/runner": {
"owner": "plugin:telegram",
"class": "plugin-runtime",
"risk": ["telegram-bot-api", "polling"]
},
"@grammyjs/transformer-throttler": {
"owner": "plugin:telegram",
"class": "plugin-runtime",
"risk": ["telegram-bot-api", "rate-limiting"]
},
"@homebridge/ciao": {
"owner": "plugin:bonjour",
"class": "plugin-runtime",
"risk": ["mdns", "network"]
},
"@modelcontextprotocol/sdk": {
"owner": "core:mcp",
"class": "core-runtime",
"risk": ["protocol-client", "network"]
},
"@mozilla/readability": {
"owner": "plugin:web-readability",
"class": "plugin-runtime",
"activation": ["tools.web.fetch.readability", "plugins.entries.web-readability.enabled"],
"risk": ["parser", "untrusted-html"]
},
"@mistralai/mistralai": {
"owner": "provider:mistral",
"class": "default-runtime-initially",
"risk": ["provider-sdk", "network"]
},
"@openclaw/fs-safe": {
"owner": "core:filesystem-safety",
"class": "core-runtime",
"risk": ["filesystem", "path-safety"]
},
"chalk": {
"owner": "core:cli",
"class": "core-runtime",
"risk": ["formatting"]
},
"chokidar": {
"owner": "core:watch-mode",
"class": "core-runtime",
"risk": ["filesystem-watch"]
},
"commander": {
"owner": "core:cli",
"class": "core-runtime",
"risk": ["cli-parser"]
},
"cross-spawn": {
"owner": "core:child-process",
"class": "core-runtime",
"risk": ["process-spawn"]
},
"croner": {
"owner": "core:scheduler",
"class": "core-runtime",
"risk": ["scheduler"]
},
"diff": {
"owner": "core:agent-editing",
"class": "core-runtime",
"risk": ["diff"]
},
"dotenv": {
"owner": "core:config",
"class": "core-runtime",
"risk": ["env-loading"]
},
"express": {
"owner": "capability:http-route-host",
"class": "default-runtime-initially",
"risk": ["http-server", "large-transitive-cone"]
},
"file-type": {
"owner": "core:media-admission",
"class": "core-runtime",
"risk": ["file-sniffing", "untrusted-files"]
},
"glob": {
"owner": "core:package-manager",
"class": "core-runtime",
"risk": ["filesystem-glob"]
},
"grammy": {
"owner": "plugin:telegram",
"class": "plugin-runtime",
"risk": ["telegram-bot-api", "network"]
},
"highlight.js": {
"owner": "core:syntax-highlighting",
"class": "core-runtime",
"risk": ["syntax-highlighting"]
},
"hosted-git-info": {
"owner": "core:git-utils",
"class": "core-runtime",
"risk": ["git-metadata-parser"]
},
"ignore": {
"owner": "core:gitignore-matching",
"class": "core-runtime",
"risk": ["pattern-matching"]
},
"@openclaw/proxyline": {
"owner": "core:proxy",
"class": "core-runtime",
"risk": ["network", "proxy"]
},
"jiti": {
"owner": "core:plugin-loader",
"class": "core-runtime",
"risk": ["dynamic-code-loading"]
},
"json5": {
"owner": "core:config",
"class": "core-runtime",
"risk": ["config-parser"]
},
"jszip": {
"owner": "core:archive-handling",
"class": "core-runtime",
"risk": ["archive-parser", "untrusted-files"]
},
"kysely": {
"owner": "core:sqlite-storage",
"class": "core-runtime",
"risk": ["database-query-builder"]
},
"linkedom": {
"owner": "plugin:web-readability",
"class": "plugin-runtime",
"activation": ["tools.web.fetch.readability", "plugins.entries.web-readability.enabled"],
"risk": ["parser", "untrusted-html"]
},
"markdown-it": {
"owner": "core:markdown-rendering",
"class": "core-runtime",
"risk": ["parser", "markdown"]
},
"minimatch": {
"owner": "core:pattern-matching",
"class": "core-runtime",
"risk": ["pattern-matching"]
},
"node-edge-tts": {
"owner": "plugin:microsoft",
"class": "plugin-runtime",
"risk": ["tts", "network"]
},
"openai": {
"owner": "provider:openai",
"class": "default-runtime-initially",
"risk": ["provider-sdk", "network"]
},
"partial-json": {
"owner": "core:llm-json-parsing",
"class": "core-runtime",
"risk": ["streaming-json-parser"]
},
"playwright-core": {
"owner": "core:browser",
"class": "core-runtime",
"risk": ["browser-automation", "cdp"]
},
"proper-lockfile": {
"owner": "core:session-storage",
"class": "core-runtime",
"risk": ["filesystem-locking"]
},
"quickjs-wasi": {
"owner": "core:code-mode",
"class": "core-runtime",
"risk": ["wasm", "sandboxed-js"]
},
"clawpdf": {
"owner": "plugin:document-extract",
"class": "plugin-runtime",
"activation": ["input_file.application_pdf", "plugins.entries.document-extract.enabled"],
"risk": ["wasm", "parser", "untrusted-files"]
},
"qrcode": {
"owner": "core:qr-setup",
"class": "default-runtime-initially",
"risk": ["terminal-rendering", "png-encoding"]
},
"rastermill": {
"owner": "core:media",
"class": "core-runtime",
"risk": ["wasm", "parser", "untrusted-files", "native-tool-fallback"]
},
"sqlite-vec": {
"owner": "capability:memory-sqlite-vec",
"class": "default-runtime-initially",
"risk": ["native", "database-extension"]
},
"tar": {
"owner": "core:archive-handling",
"class": "core-runtime",
"risk": ["archive-parser", "untrusted-files"]
},
"tree-sitter-bash": {
"owner": "core:command-explainer",
"class": "core-runtime",
"risk": ["wasm", "parser", "untrusted-shell"]
},
"tslog": {
"owner": "core:logging",
"class": "core-runtime",
"risk": ["logging"]
},
"typescript": {
"owner": "core:typescript-analysis",
"class": "core-runtime",
"risk": ["compiler-api"]
},
"typebox": {
"owner": "core:json-schema-contracts",
"class": "core-runtime",
"risk": ["schema-generation"]
},
"undici": {
"owner": "core:http-client",
"class": "core-runtime",
"risk": ["network"]
},
"web-push": {
"owner": "core:web-push",
"class": "core-runtime",
"risk": ["network", "push-notifications", "crypto"]
},
"web-tree-sitter": {
"owner": "core:command-explainer",
"class": "core-runtime",
"risk": ["wasm", "parser", "untrusted-shell"]
},
"ws": {
"owner": "core:gateway-websocket",
"class": "core-runtime",
"risk": ["network", "websocket"]
},
"yaml": {
"owner": "core:config-and-tooling",
"class": "core-runtime",
"risk": ["parser"]
},
"zod": {
"owner": "core:config-and-plugin-sdk-validation",
"class": "core-runtime",
"risk": ["schema-validation"]
}
}
}