Skip to content

fix: correct malformed private field type in multiple package.json files#35806

Closed
dill-lk wants to merge 1 commit intofacebook:mainfrom
dill-lk:fix/package-json-private-metadata
Closed

fix: correct malformed private field type in multiple package.json files#35806
dill-lk wants to merge 1 commit intofacebook:mainfrom
dill-lk:fix/package-json-private-metadata

Conversation

@dill-lk
Copy link

@dill-lk dill-lk commented Feb 17, 2026

Overview

While auditing the React monorepo for metadata compliance, I discovered that multiple package.json files were using a string "true" for the private field instead of the boolean true required by the npm specification.

Changes

This PR corrects the private field type from string to boolean in the following locations to ensure consistency and prevent failures in automated package metadata scanning tools:

  1. packages/react-devtools-fusebox/package.json
  2. compiler/packages/react-forgive/client/package.json
  3. compiler/packages/react-forgive/server/package.json

Impact

Malformed metadata often causes failures in security, license, and compliance scanning tools (such as ScanCode.io) that strictly validate package metadata types. This fix ensures the repository remains compliant with industry-standard package specifications.

Verification

  • Audited all package.json files in the monorepo using grep.
  • Verified that the private field is now correctly recognized as a boolean.

@meta-cla meta-cla bot added the CLA Signed label Feb 17, 2026
@dill-lk
Copy link
Author

dill-lk commented Feb 17, 2026

Since PR #35802 has been updated to cover all the malformed fields I identified during my audit, I am closing this PR to avoid duplication. Glad to see the entire monorepo is getting fixed!

@dill-lk dill-lk closed this Feb 17, 2026
@dill-lk dill-lk deleted the fix/package-json-private-metadata branch February 17, 2026 09:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant