Is the latest version legit?
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 1k
- Forks
- 165
- PR merge metrics
- No merged PRs in 30d
Description
Please don't take any offense to this. Just trying to cover my basis.
Is there a good explanation why the size of the package increased? see https://npmx.dev/package/@openid/appauth/v/1.4.0
Is there a development process outside of github, which is not public which could explain the following?
https://github.com/openid/AppAuth-JS/pull/233 with a single commit coming from https://github.com/tikurahul/AppAuth-JS/commit/cbabdaf2747563cfac178e1aa89aa34c1c191d18 looks suspicious. Updating so many files and doing what is written in the commit message
Update to TypeScript 7.
- Migrate tests to
vitestfrom Karma.- Publish modules.
- Moved to
vitefor the app and massively simplified the workflow.- Move to ESM Modules.
could take more than a single commit.
The last version before this was released in April 2024.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing pull request #233 and commit cbabdaf2747563cfac178e1aa89aa34c1c191d18, then compare the @openid/appauth 1.4.0 package with the previous release. Check the stated TypeScript, Vitest, Vite, ESM, and publishing changes against the package contents and size. Done means documenting a clear explanation of the release and whether the concerns are substantiated.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript, vite
- Domain
- build-system, release, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100