npm warning requiring peer of solium about solium-plugin-security HOT 7 OPEN

Discussion opened at https://npm.community/t/allow-any-one-of-specified-packages-in-peerdependencies/4933

from solium-plugin-security.

Hey @pcowgill sorry for late response, yes this is the ideal solution, but unfortunately I don't have the bandwidth to change this, because this requires huge changes in this repo as well as some changes & tests in core ethlint (to allow reading npm modules prefixed with ethlint-plugin-, currently it can only read solium-plugin-)

from solium-plugin-security.

@duaraghav8 Totally understandable. Thanks for getting back to me!

from solium-plugin-security.

Great point @zachlysobey
I just confirmed from docs and the actual code that there is unfortunately no way to specify an OR condition in peer deps.

I'll open up an issue with NPM. Until an OR is possible, I'll add this caveat to the Docs.

I don't want to change the peer dep from solium to ethlint right now because it could be breaking for anyone who treats warnings as errors too.

I'm open to hearing any suggestions you have on solving this problem.
Please ignore the warning for now.

from solium-plugin-security.

(This comment is for my own future reference)

Issue has been added to Blocked Tasks.

Once OR is available:

• Modify security plugin to use it
• Remove caveat from plugin's doc as well as Ethlint docs
• Modify Ethlint Dev doc to inform reader to use this OR feature in peer deps to specify both solium and ethlint.

from solium-plugin-security.

@duaraghav8 What about renaming this repo to ethlint-plugin-security and publishing to npm from the main feature branch a new package named ethlint-plugin-security with a peer deep of ethlint, and from a legacy feature branch publishing the old package named solium-plugin-security with the existing peer dep?

from solium-plugin-security.

@duaraghav8 What about renaming this repo to ethlint-plugin-security and publishing to npm from the main feature branch a new package named ethlint-plugin-security with a peer deep of ethlint, and from a legacy feature branch publishing the old package named solium-plugin-security with the existing peer dep?

Do you think this would be a workable solution? Thanks!

from solium-plugin-security.