sorb/management
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(issues): #0055 — the @sorb scope is pinned nowhere but the lockfile

Browse Source 
ThreadNet-Web resolves @sorb/threadnet-call-embedded from rohana only because
pnpm-lock.yaml pins the full tarball URL and CI installs frozen. There is no
.npmrc anywhere, so the moment someone bumps the version, pnpm reaches for
registry.npmjs.org instead. Hit while bumping to .8 for #0054.

Today that fails loudly with a 404 — but only because the name happens to be
unregistered on public npm. The protection is a coincidence, not a control:
register that name and the same command resolves successfully against a
stranger's package, in the one moment where a fresh download looks expected.

Documenting it is explicitly not the fix here; the checked-in .npmrc is, because
it removes the wrong path rather than warning about it.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Thore Cimbal
2026-08-16 12:00:00 +00:00
co-authored by Claude Opus 4.8
parent 0f908143b1
commit 78228e4d3b
2 changed files with 98 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
STATUS.md
+3 -2
View File
@@ -2,9 +2,9 @@
<!-- Generated by scripts/gen_status.py — do not edit. -->
## Issues (21 open, 27 closed)
## Issues (22 open, 27 closed)
Verteilung: M1 5 · M2 12 · M4 3 · M5 1
Verteilung: M1 5 · M2 13 · M4 3 · M5 1
| Issue | Status | Meilenstein | Priorität | Title |
|---|---|---|---|---|
@@ -29,6 +29,7 @@ Verteilung: M1 5 · M2 12 · M4 3 · M5 1
| [0051](docs/issues/0051-cve-remediation-pass.md) | open | M5 | high | CVE-Remediation-Pass: Schwachstellen-Report abarbeiten |
| [0053](docs/issues/0053-historien-durchgang-nicht-kanonische-commits.md) | open | M2 | low | Historien-Durchgang: acht nicht-kanonische Commits mitziehen |
| [0054](docs/issues/0054-ki-geraeuschunterdrueckung-element-call.md) | open | M4 | medium | Tastaturgeräusche in Calls: quelloffene KI-Geräuschunterdrückung im Client prüfen |
| [0055](docs/issues/0055-npm-scope-aufloesung-threadnet-web.md) | open | M2 | medium | Issue-0055: `@sorb`-Scope in ThreadNet-Web ist nirgends auf rohana festgelegt |
## Active design docs (0)