Skip to content

Conversation

@bjohansebas
Copy link
Member

We are sending extra files, ideally, we should only send what is necessary to npm.

Comment on lines +12 to +17
"files": [
"lib",
"bin",
".github/workflows/wiby.yaml",
"package-support.json"
],
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  1. the files field is dangerous and should never be used; npmignore is how files are kept out of the published package
  2. tests should be published in a package so that npm explore foo && npm install && npm test always works
  3. github workflows never need to be published.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the files field is dangerous and should never be used; npmignore is how files are kept out of the published package

Sure, I also agree with that, but I see that many packages use files instead of .npmignore

tests should be published in a package so that npm explore foo && npm install && npm test always works

That's new to me, and it's the first time i've heard it. So, let's send the tests.

github workflows never need to be published.

with Wiby's current design, we need to send that file. I want to change the way Wiby runs in GitHub Actions, but that will take time.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm confused why the published wiby tarball needs to contain a github action, since actions are only run from repos?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

By a command we used that copied that same GitHub Action, wiby github-workflow install

https://github.com/pkgjs/wiby/blob/main/USAGE.md#wiby-github-workflow-install

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah ok, good catch :-)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants