-
Notifications
You must be signed in to change notification settings - Fork 11
fix: make folders anchor items to prevent movement during drag; update react-grid-layout to use GitHub repo #87
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -114,7 +114,7 @@ | |
| "react-color": "^2.19.3", | ||
| "react-dom": "19.2.1", | ||
| "react-dropzone": "^14.3.8", | ||
| "react-grid-layout": "^2.2.2", | ||
| "react-grid-layout": "git+https://github.com/urjitc/react-grid-layout.git", | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. P1: Git dependency should be pinned to a specific commit hash for reproducible builds and supply chain security. Without pinning, any push to this repository will change what gets installed, making builds non-reproducible and potentially introducing breaking changes or security vulnerabilities. Pin to a specific commit: Prompt for AI agentsThere was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Pin the git dependency to a specific commit hash for reproducible builds. Using an unpinned git URL means builds are non-deterministic—any push to the default branch changes what gets installed. This creates several risks:
Suggested fix- "react-grid-layout": "git+https://github.com/urjitc/react-grid-layout.git",
+ "react-grid-layout": "git+https://github.com/urjitc/react-grid-layout.git#<commit-sha>",Replace git ls-remote https://github.com/urjitc/react-grid-layout.git HEADAdditionally, consider documenting why this fork is needed (e.g., 🤖 Prompt for AI Agents |
||
| "react-helmet-async": "^2.0.5", | ||
| "react-hook-form": "^7.69.0", | ||
| "react-icons": "^5.5.0", | ||
|
|
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
style: Using a personal GitHub fork instead of npm package introduces dependency management risks. Verify the fork has anchor property changes, and consider contributing upstream to
react-grid-layoutfor long-term maintainability.Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!
Prompt To Fix With AI