From 68b083807448ca36006a1f7bda841a2853a1ff75 Mon Sep 17 00:00:00 2001 From: dtzp555-max Date: Tue, 5 May 2026 09:53:20 +1000 Subject: [PATCH] chore(deps): delete stale package-lock.json (was v3.4.0 vs package.json v3.12.0) (#61) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The repo-tracked package-lock.json declared "version": "3.4.0" while package.json is at v3.12.0 — 8 minor versions of drift. Since package.json has zero dependencies (only built-in node:sqlite, node:http, node:https), the lockfile carried no useful information. It was pure noise that would mislead anyone running `npm ci` into thinking they were installing v3.4.0. Verification: - package.json has no `dependencies` or `devDependencies` field (grep -A2 '"dependencies"' package.json → no match). - Fresh clone + checkout + `npm install` → exit 0, "audited 1 package in 93ms, found 0 vulnerabilities". - node_modules is correctly empty after install (no bin shims to relink). Refs: audit side-finding 1 of 4. Co-authored-by: dtzp555 Co-authored-by: Claude Opus 4.7 --- package-lock.json | 20 -------------------- 1 file changed, 20 deletions(-) delete mode 100644 package-lock.json diff --git a/package-lock.json b/package-lock.json deleted file mode 100644 index 86a2ef3..0000000 --- a/package-lock.json +++ /dev/null @@ -1,20 +0,0 @@ -{ - "name": "openclaw-claude-proxy", - "version": "3.4.0", - "lockfileVersion": 3, - "requires": true, - "packages": { - "": { - "name": "openclaw-claude-proxy", - "version": "3.4.0", - "license": "MIT", - "bin": { - "ocp": "ocp", - "openclaw-claude-proxy": "server.mjs" - }, - "engines": { - "node": ">=18" - } - } - } -}