mirror of
https://github.com/hanzoai/insights.git
synced 2026-10-30 16:15:31 +00:00
zeekay
8e3da31c89
Same defect as the Python side, and worse in one respect. Of the eighteen third-party npm and crate names the rename rewrites, nine resolve to nothing and four resolve to a real package belonging to someone else — `insights-js` is a client for getinsights.io, `@hanzo/brand` and `@hanzo/react` are unrelated packages, and `datastore` is an abandoned crate. Two more, `@hanzo/icons` and `@hanzo/mascot-mode`, are published stubs whose only content is a dependency on the upstream package, so they reinstate what the rename was for without an install error to notice. So a renamed name is never resolved from a registry now: each is aliased to the package that really is the thing we mean — our fork where we publish one, upstream's where we do not. npm spells that `npm:`, cargo spells it `package =`, and uv spells it a source, but it is one rule. github.com/posthog/axum-test-helper had been rewritten into an org that does not exist, because the URL preserve was case-sensitive and upstream writes its own org both ways. Our own repository is the one github.com/posthog URL in the tree that is not a dependency, so it is substituted before the preserve holds it. pnpm 10 reads overrides from pnpm-workspace.yaml and ignores the package.json field, which had left every pin inert, security bumps included, so they move to where they are read. It also no longer links workspace packages for a plain range, and our design system is unpublished, so "*" was going to the registry and 404ing. rollup 2.x ended at 2.79.2 in September 2024 and 2.80.0 appeared seventeen months later on that dead line with no trust evidence. The trust policy is right to refuse it; this pins the last trusted version on that path rather than relaxing the policy.
24 lines
561 B
TOML
24 lines
561 B
TOML
[package]
|
|
name = "funnels"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
|
|
[dependencies]
|
|
serde = { version = "1.0.228", features = ["derive"] }
|
|
serde_json = "1.0.145"
|
|
itertools = "0.14.0"
|
|
uuid = { version = "1.18.1", features = ["v4", "serde"] }
|
|
ordered-float = "5.1.0"
|
|
datastore-types = { package = "clickhouse-types", version = "0.1" }
|
|
|
|
[dev-dependencies]
|
|
rstest = "0.26.1"
|
|
|
|
[profile.release]
|
|
# Aggressive: the UDF runs in a long-lived pool, but build size and startup
|
|
# still matter for the respawn path.
|
|
lto = "fat"
|
|
codegen-units = 1
|
|
panic = "abort"
|
|
strip = "symbols"
|