@stackline/lockfile 1.0.8

@stackline/lockfile@1.0.8

Independent Stackline maintenance fork. Original authors and licenses are retained.

Source commit: a72b43d
Publication: https://github.com/alexandroit/stackline-lockfile/actions/runs/36511032061/attempts/1
CI: https://github.com/alexandroit/stackline-lockfile/actions/runs/36510878029

The published tarball is the exact artifact tested in CI. Registry bytes, provenance,
signatures, direct and aliased installs, and zero known production audit findings were verified.
Audit results are a point-in-time check, not a guarantee of absolute security.

See the repository changelog and notices for the focused fixes and upstream attribution.

@stackline/lockfile 1.0.10

Documentation and package discovery update for @stackline/lockfile@1.0.10.

Uses the published 1.0.8 tarball as the baseline. Only the README and package version, keywords and homepage changed. All other 7 file contents are identical; runtime/development dependencies, original authors and license are preserved.

Documentation · Publication evidence

SHA-512: a24154a4ee22f9cb5b444d4ffc3340a1650cee7571e0271015842aa9c533e2378adb3a0a646e160d153dbef89c6dde27da155c0117a38be2cb7420c294d93e70

@stackline/lockfile 1.0.6

@stackline/lockfile 1.0.6

Independent, compatibility-first continuation of lockfile@1.0.4.

This release preserves the six-method CommonJS API, callback timing, the
zero-byte lock-file format, retry, wait, polling, stale detection, synchronous
behavior, direct scoped installation, and the historical lockfile npm alias.
It moves process-exit cleanup from signal-exit@3.0.7 to the maintained
signal-exit@4.1.0 named API without changing observable lock behavior.

The release source is commit
efb33f63e23b6e0d082b7a44d3e1f16650558ae5. CI passed on Linux, Windows and
macOS across Node.js 14.17 through 26, and CodeQL passed on the same commit.
Direct and alias consumers from Verdaccio and official npm installed without
warnings, produced valid exact dependency trees, and reported zero production
audit findings.

The package is ISC licensed, preserves the complete upstream attribution, and
is not affiliated with or endorsed by Isaac Z. Schlueter, npm, the original
maintainers, or the upstream project.

Artifact SHA-256:
2367fa0a15311a39fe13cfa970b0a87108cdff4cf454214a6f25ec9f520f33fc.

@stackline/lockfile 1.0.5

@stackline/lockfile 1.0.5

Independent, compatibility-first continuation of lockfile@1.0.4.

This release preserves the six-method CommonJS API, the zero-byte lock-file
format, retry, wait, polling, stale detection, synchronous behavior, direct
scoped installation, and npm aliases under the historical lockfile key. It
adds first-party TypeScript declarations and makes one bounded correction:
asynchronous unlock continues to treat ENOENT as success but now passes the
original non-ENOENT unlink error to its callback exactly once.

The release source is commit
4f024a3a8660d576b5c18203c57e4070ebd0d40d. CI passed on Linux, Windows and
macOS across Node.js 14.17 through 26, and CodeQL passed on that same untagged
commit before the artifact was built.

The package is ISC licensed, preserves the complete upstream attribution, and
is not affiliated with or endorsed by Isaac Z. Schlueter, npm, the original
maintainers, or the upstream project.

Artifact SHA-256:
5987ddf7ab28f352a983b3680fce349f1a91d49984d3756267db5772a6d52d92.