Fix the scaffolded framework pin, npm audit warning, and typecheck UX#9
Merged
Conversation
- pyxle init renders the scaffolded requirements.txt from the running framework version (was a stale literal '>=0.4.1,<0.5' that silently DOWNGRADED fresh installs 0.6.1 -> 0.4.5 on 'pyxle install'). The pin is now '>=<current>,<next-minor>' with a live-version regression test that cannot go stale. - Scaffold bumps vite to ^6.3 / @vitejs/plugin-react ^4.4: fresh scaffolds now pass npm audit with 0 vulnerabilities (was 1 high + 1 moderate via transitive esbuild <=0.24.2, GHSA-67mh-4wv8-2f99). Verified e2e: init -> npm install -> dev -> build -> serve. - pyxle typecheck fails fast with an actionable error when TypeScript is missing instead of relaying npx's placeholder banner and a contradictory 'failed with 0 error(s)' summary. - Scaffolded AGENTS.md no longer claims LoaderError must be imported; auto-injected runtime names documented consistently. Suite: 2195 passed, coverage 96.48% (threshold 95). Ruff clean.
shivamsn97
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Four fixes to the first-run experience:
pyxle initrendersrequirements.txtfrom the running framework version. The template previously hard-codedpyxle-framework>=0.4.1,<0.5, so runningpyxle installin a fresh project replaced the framework you had just installed with an older release. The pin is now generated as>=<current>,<<next-minor>, with a regression test derived from the live version so it cannot go stale.npm auditclean — the scaffold now pinsvite ^6.3and@vitejs/plugin-react ^4.4, clearing the advisory flagged against the older toolchain (GHSA-67mh-4wv8-2f99). Verified end-to-end: init → npm install (0 vulnerabilities) → dev → build → serve.pyxle typecheckfails fast with a clear message when TypeScript isn't installed, instead of relaying npx's placeholder banner and a contradictory "failed with 0 error(s)" summary.AGENTS.mdcorrected — auto-injected runtime names (LoaderErrorand friends) are now documented consistently.Tests: 2195 passed, coverage 96.48%.