# SPDX-License-Identifier: PMPL-1.0-or-later
name: NPM/Bun Blocker
on: [push, pull_request]

permissions: read-all

jobs:
  check:
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
      - name: Block npm/bun
        run: |
          if [ -f "package-lock.json" ] || [ -f "bun.lockb" ] || [ -f ".npmrc" ]; then
            echo "❌ npm/bun artifacts detected. Use Deno instead."
            exit 1
          fi
          echo "✅ No npm/bun violations"