A throwaway consumer outside the repository declares every member as a file: dependency, installs, and runs the installed executable with plain Node, asserting the version it reports. That is the check a workspace link or a stale lib/ in the checkout cannot pass for: it reads only what files selected. The family declares its executable, so the vendored family — libraries a consumer imports, with no executable — states that it has none instead of carrying a probe that would prove nothing. Both pack workflows run it after packing, still without credentials. |
||
|---|---|---|
| .. | ||
| issue-management | ||
| ISSUE_TEMPLATE | ||
| workflows | ||
| AGENTS.md | ||
| dependabot.yml | ||
| pull_request_template.md | ||