`@netlify/serverless-functions-api` has no provenance
Open
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 26
- Forks
- 21
- Avg merge
- 22h 38m
- Merged PRs (30d)
- 13
Description
Currently, https://github.com/withastro/astro/pull/17804 fails because @netlify/serverless-functions-api has no provenance. Dependency chain:
➜ update-astrojs-netlify git:(renovate/@astrojsnetlify) pnpm why @netlify/serverless-functions-api
@netlify/serverless-functions-api@2.15.1
└─┬ @netlify/zip-it-and-ship-it@14.5.6
└─┬ @netlify/functions-dev@1.2.8
└─┬ @netlify/dev@4.18.3
└─┬ @netlify/vite-plugin@2.12.3
└── @astrojs/netlify@8.2.6 (dependencies)
The repo linked in its package.json is not public anymore so it would be great to at least fix provenance in some way
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the package.json reference for @netlify/serverless-functions-api and trace how that dependency is published in the primitives repository. Confirm the result against the provenance failure reported by the Astro pull request; done means the package has usable provenance and the dependency no longer causes that failure.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- release
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 45/100