check-safety/check_lockfiles.go
Alex Dunmow c4d01de82c feat: concise output + diff-scoped any check
Reporter is now a collector: checks declare a verdict (OK/Skip/Warn/Fail/
Fatal) plus findings, and a single central render() prints output. Default
output is silent on pass/skip — only FAIL/WARN/ERR checks print, followed by
one tally line, so a clean run is two lines. --verbose restores full per-check
output. All ~30 checks were converted to this API; orphaned guidance/label
helpers (printPerTargetOKLines, per-check *Help blocks, colors_format.go) were
removed.

The any-usage check (2e) now defaults to only the unstaged working-tree diff
(changed lines), via a new per-repo git-diff index in changedlines.go; --all-any
restores the full scan. Not-a-git-repo / no-diff warns on nothing.

Golden fixtures regenerated; integration tests updated to the new format; added
unit tests for the diff index.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-04 01:16:56 +08:00

30 lines
799 B
Go

package main
func init() {
register(Check{
Seq: 90,
ID: "9",
Title: "No npm/yarn lockfiles (pnpm only)",
Run: func(ctx *ScanContext, rep *Reporter) {
lockViolations := []lockfileViolation{}
if ctx.includeCoreTargets {
lockViolations = checkLockfiles(ctx.repoRoot)
}
for _, target := range ctx.pluginTargets {
for _, v := range checkLockfiles(target.root) {
v.file = prefixDisplayPath(target.display, v.file)
lockViolations = append(lockViolations, v)
}
}
if len(lockViolations) > 0 {
rep.Fail("%d non-pnpm lockfile(s) found — remove and use pnpm (pnpm-lock.yaml only)", len(lockViolations))
for _, v := range lockViolations {
rep.Findingf("%s", v.file)
}
} else {
rep.OK("Only pnpm lockfiles present")
}
},
})
}