[Bug]: Package Lock File Updates with Workspace Name

[AlexJump24]

Platform

macOS

Operating system version

macOS Sequoia 15.5

System architecture

ARM64 (M1, M2, etc)

PolyScope Version

0.6.0

Bug description

Changes made within a workspace via an npm audit caused the package-lock.json file to update the package name to the workspace name.

Not sure if this is possible to fix but thought I'd share. Maybe this is something that can block on the agent itself if not at repository level.

Steps to reproduce

1. Run an npm command like npm audit fix.
2. See package name updated in lock file.

Relevant log output

[mpociot]

Where does the package name come from? Probably automatically via the folder name?

[AlexJump24]

yeah that is right. Also to be clear as my instructions were slightly misleading this is of course when an agent runs npm audit e.g. via a skill.