harden: add package-lock.json to .gitignore#195
harden: add package-lock.json to .gitignore#1950x-SquidSol wants to merge 1 commit intodcccrypto:mainfrom
Conversation
A stale package-lock.json (version 0.5.1) existed alongside the authoritative pnpm-lock.yaml (version 1.0.0-beta.13). npm install would resolve a completely different dependency tree than pnpm install, creating a supply-chain confusion vector. Added to .gitignore to prevent accidental commits. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
Warning Rate limit exceeded
Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 50 minutes and 55 seconds. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Summary
package-lock.json(version0.5.1) existed alongside the authoritativepnpm-lock.yaml(version1.0.0-beta.13)npm installwould resolve a completely different dependency tree thanpnpm installpackage-lock.jsonto.gitignoreto prevent accidental commitsTest plan
🤖 Generated with Claude Code