swagger-api / swagger-api/swagger-ui
Remove `@scarf/scarf` dependency
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 29k
- Forks
- 9.3k
- Avg merge
- 2d 23h
- Merged PRs (30d)
- 25
Description
@scarf/scarf is used for analytics, but it can not work with pnpm or bun which block its lifecycle scripts by default, and recently npm users are also moving towards using ignore-scripts to harden against supply chain attacks. The gathered analytics data will not be accurate in these cases and therefore I suggest removing the dependency from swagger-ui-dist and other packages.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the package manifests and install or build entry points for swagger-ui-dist and the other affected packages, then check where @scarf/scarf is declared or referenced. Remove the dependency wherever the issue’s scope requires and verify that package installation and builds succeed with lifecycle scripts disabled.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- build-system
- Issue type
- Refactor
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100