@stackline/proxyquire 1.0.3

@stackline/proxyquire@1.0.3

Independent Stackline maintenance fork. Original authors and licenses are retained.

Source commit: 18e8d56
Publication: https://github.com/alexandroit/stackline-proxyquire/actions/runs/36508326868/attempts/1
CI: https://github.com/alexandroit/stackline-proxyquire/actions/runs/36508139705

The published tarball is the exact artifact tested in CI. Registry bytes, provenance,
signatures, direct and aliased installs, and zero known production audit findings were verified.
Audit results are a point-in-time check, not a guarantee of absolute security.

See the repository changelog and notices for the focused fixes and upstream attribution.

@stackline/proxyquire 1.0.5

Documentation and package discovery update for @stackline/proxyquire@1.0.5.

Uses the published 1.0.3 tarball as the baseline. Only the README and package version, keywords and homepage changed. All other 23 file contents are identical; runtime/development dependencies, original authors and license are preserved.

Documentation · Publication evidence

SHA-512: 7db472abb01e6d5197b91613cb1838a1f4640bbba26d623f42328f06dfb001b1b5c14902f3a3499f5421cb03f83058de1e7d98c4a09782a420ffa6acae54bff6

@stackline/proxyquire 1.0.4

Historical documentation-only publication, superseded by @stackline/proxyquire@1.0.5. Runtime files and dependency requirements are unchanged from 1.0.3. Original authors and licenses remain preserved.

Original GitHub Actions publication

SHA-512: 2dd99845b51dc2e5c681f667a6d106f7275c42adade4909d8c1fece12a01abdd0cdcc84b608541dd3a5edf68417c575423bdb07888ed8ca643e94451a25df600

@stackline/proxyquire 1.0.1

@stackline/proxyquire 1.0.1

This patch preserves the proxyquire@2.1.3 public contract while removing the
complete seven-package resolve@1.22.12 production subtree.

The replacement is a focused lexical CommonJS resolver that keeps symlink and
package-export alias request identities distinct. The release gate includes 72
licensed upstream tests, 132 differential executions, targeted resolver and
cache regressions, Node.js 12 through 24, Linux/macOS/Windows, TypeScript 3.9
and current TypeScript, warning-free direct and historical-alias installs, a
valid npm tree, and zero full or production audit findings.

The accepted 25-file artifact contains no runtime, optional, peer, or bundled
dependencies. Every regular file is mode 0644. Verdaccio and official npm
serve the exact same bytes.

Source commit: 7c54172a2c5a85928b0ddb2785d829dfc73f31a7

CI: https://github.com/alexandroit/stackline-proxyquire/actions/runs/33301832433

CodeQL: https://github.com/alexandroit/stackline-proxyquire/actions/runs/33301832509

@stackline/proxyquire 1.0.0

@stackline/proxyquire 1.0.0

Compatibility-first continuation of proxyquire@2.1.3 for CommonJS dependency
stubbing. This release preserves the established callable API, resolution and
stub semantics, call-through/cache/global controls, primitive and missing-module
stubs, and runtime deep imports. It adds first-party TypeScript declarations and
createProxyquire(import.meta.url) for ESM or native-TypeScript hosts loading
CommonJS subjects.

The implementation bounds transient module.parent.children retention,
restores loader/cache state compositionally, isolates global-mode state per
load, and uses prototype-safe stub bookkeeping. Native ESM imports remain
outside the interception boundary.

Provenance

• source: https://github.com/alexandroit/stackline-proxyquire
• source commit: 36552232c7fd0d133d56a8a8f502f15283f94914
• release tag: stackline-v1.0.0
• upstream baseline: proxyquire@2.1.3, MIT
• CI: https://github.com/alexandroit/stackline-proxyquire/actions/runs/33079422946
• CodeQL: https://github.com/alexandroit/stackline-proxyquire/actions/runs/33079422873

Artifact

• file: stackline-proxyquire-1.0.0.tgz
• packed size: 14,244 bytes
• unpacked size: 45,400 bytes
• files: 24
• SHA-1: 34d6a0ce2fc5b46ddf52e6a07ae6a9d6957a89fa
• SHA-256: 0abc781ae295e7a9fa0a9d95c25b739e0f320cf5630cd864b46eba5f0baa521a
• SHA-512: 0b8ca747480401bab8b3a21a87471746d5dd412c647c7a4d892616a45abfb629a25a0e47e17a8c8c904e0a6a07243bab4e0365cb87043caee81f9f26fc116b84
• npm integrity: sha512-C4ynR0gEAbq4s6Iah0cXRtXdQSxkfHpNiSYWpFq/timiWg5H4XqMjJBOCmoHJDurTgNly4cEPK7oH58m/BFrhA==

FILE_INVENTORY.json records every packed file. sbom.cdx.json records the
exact CycloneDX production graph. SHA1SUMS, SHA256SUMS, and SHA512SUMS
cover the immutable tarball.

Dependency decision

resolve@1.22.12 is retained and exact-pinned because Node's native resolver
collapses distinct symlink and package-export-alias request identities. The
seven-node external production graph is fully MIT-licensed and passed the
production audit; all 238 installed release-gate packages passed npm signature
verification.