vrr/openclaw
2
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-20 00:59:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 18

refactor: simplify plugin dependency handling

Browse source 
Simplify plugin installation and runtime loading around package-manager-owned dependencies, with Jiti reserved for local/TS fallback paths.

Also scans npm plugin install roots so hoisted transitive dependencies are covered by dependency denylist and node_modules symlink checks.
This commit is contained in:
Peter Steinberger 2026-05-01 21:32:22 +01:00 • committed by GitHub
parent 2e8e9cd6ca
commit ed8f50f240
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
294 changed files with 2562 additions and 25454 deletions
Download patch file Download diff file Expand all files Collapse all files

3
.github/codeql/codeql-plugin-boundary-critical-quality.yml vendored
View file

@ -20,8 +20,7 @@ paths:
- src/plugins/bundled-dir.ts
- src/plugins/bundled-plugin-metadata.ts
- src/plugins/bundled-public-surface-runtime-root.ts
- src/plugins/bundled-runtime-deps.ts
- src/plugins/bundled-runtime-root.ts
- src/plugins/plugin-sdk-dist-alias.ts
- src/plugins/captured-registration.ts
- src/plugins/config-activation-shared.ts
- src/plugins/config-contracts.ts

3
.github/codeql/codeql-plugin-trust-boundary-critical-security.yml vendored
View file

@ -25,8 +25,7 @@ paths:
- src/plugins/bundled-dir.ts
- src/plugins/bundled-plugin-metadata.ts
- src/plugins/bundled-plugin-scan.ts
- src/plugins/bundled-runtime-deps*.ts
- src/plugins/bundled-runtime-root.ts
- src/plugins/plugin-sdk-dist-alias.ts
- src/plugins/cli-registry-loader.ts
- src/plugins/config-activation-shared.ts
- src/plugins/config-contracts.ts