169e5b3e96
Drops 234 lines of inline commentary across the renderer, sanitizer, HTML preview route, supply-chain gate, and their tests. Same intent, shorter form. No code behaviour changes; vitest 24/24, pytest 24/24, tsc / vite build clean.
11 lines
554 B
Text
11 lines
554 B
Text
# Reviewed install-script (postinstall) packages, exempt from
|
|
# scripts/check_new_install_scripts.py. Pin each as "name@version" -- a
|
|
# maintainer compromise shipping a new malicious version must NOT slip
|
|
# through the same allowlist line.
|
|
#
|
|
# Rules: read the install body before adding. Entries MUST land on main
|
|
# first; the gate rejects head-only additions that self-approve a new dep.
|
|
|
|
# evanw/esbuild: postinstall downloads platform native binary. Pulled in
|
|
# transitively by vitest for dev-only test transforms; no runtime exposure.
|
|
esbuild@0.21.5
|