From 1dff0c805ec5efea03524cc24f12e80be120ddba Mon Sep 17 00:00:00 2001 From: le king fu Date: Mon, 19 Oct 2026 20:24:12 -0400 Subject: [PATCH] docs(review-levels): name the package.json block blind spot (#63) Co-Authored-By: Claude Opus 5.5 --- scripts/review-levels.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/scripts/review-levels.py b/scripts/review-levels.py index 5c129d1..ef2a0b8 100755 --- a/scripts/review-levels.py +++ b/scripts/review-levels.py @@ -21,7 +21,10 @@ the diff: index.js routing and auth, side effects of the shipped modules (disk writes, the temp-file sweep, body caps, shell commands, outbound calls, require.main), guard tests (an existing line changed or removed), package.json (anything but a version), package-lock.json (a package added or -removed, an origin changed), .gitignore (a line removed). +removed, an origin changed), .gitignore (a line removed). package.json +knows the block of a package line only when the block's opening line is in +the hunk: a bump deep inside a large "dependencies" block reads as normal, +where the table says high (impossible today, the runtime has none). """ import itertools import json