mirror of
https://github.com/hanzoai/sign.git
synced 2026-10-21 01:21:51 +00:00
npm refused to install at all: three entries in the overrides block contradicted the range the same package was declared with, and an override that disagrees with a direct dependency is an EOVERRIDE, not a tie-break. All three were left behind by "Give every package one version", which raised the declared ranges and never revisited the pins below them. zod already showed the way, so ws, pdfjs-dist and typescript now use the same $name form and follow whatever the manifests declare. The reason pdfjs-dist was held at 5.4.296 was react-pdf, which this repo no longer depends on; react-pdf itself now asks for the 6.3.289 we declare. The same commit pinned @hanzo/insights-node to 6.0.0, which nobody can install: it depends on insights-node 5.10.4, an unscoped name published to no registry. Back to 5.26.2, the newest release that resolves, until a 6.x ships with its scope intact. Co-authored-by: Hanzo Dev <[email protected]>