Move safe-chain package to packages/safe-chain

.gitignore

@@ -138,4 +138,9 @@ dist
 
 # Vite logs files
 vite.config.js.timestamp-*
-vite.config.ts.timestamp-*
+vite.config.ts.timestamp-*
+
+# AI
+Claude.md
+.claude
+.reference

eslint.config.js

@@ -22,5 +22,5 @@ export default defineConfig([
     },
     rules: {},
   },
-  globalIgnores(['test/e2e']),
+  globalIgnores(['test/e2e', 'node_modules']),
 ]);

package-lock.json

@@ -1,29 +1,15 @@
 {
-  "name": "@aikidosec/safe-chain",
+  "name": "aikido-safe-chain-workspace",
   "version": "1.0.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
-      "name": "@aikidosec/safe-chain",
+      "name": "aikido-safe-chain-workspace",
-      "version": "1.0.0",
       "license": "AGPL-3.0-or-later",
-      "dependencies": {
+      "workspaces": [
-        "@inquirer/prompts": "^7.4.1",
+        "packages/*"
-        "abbrev": "^3.0.1",
+      ],
-        "chalk": "^5.4.1",
-        "npm-registry-fetch": "^18.0.2",
-        "ora": "^8.2.0",
-        "semver": "^7.7.2"
-      },
-      "bin": {
-        "aikido-npm": "bin/aikido-npm.js",
-        "aikido-npx": "bin/aikido-npx.js",
-        "aikido-pnpm": "bin/aikido-pnpm.js",
-        "aikido-pnpx": "bin/aikido-pnpx.js",
-        "aikido-yarn": "bin/aikido-yarn.js",
-        "safe-chain": "bin/safe-chain.js"
-      },
       "devDependencies": {
         "@eslint/js": "^9.26.0",
         "eslint": "^9.26.0",
@@ -32,6 +18,10 @@
         "typescript-eslint": "^8.32.0"
       }
     },
+    "node_modules/@aikidosec/safe-chain": {
+      "resolved": "packages/safe-chain",
+      "link": true
+    },
     "node_modules/@eslint-community/eslint-utils": {
       "version": "4.7.0",
       "resolved": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.7.0.tgz",
@@ -5764,6 +5754,27 @@
       "peerDependencies": {
         "zod": "^3.24.1"
       }
+    },
+    "packages/safe-chain": {
+      "name": "@aikidosec/safe-chain",
+      "version": "1.0.0",
+      "license": "AGPL-3.0-or-later",
+      "dependencies": {
+        "@inquirer/prompts": "^7.4.1",
+        "abbrev": "^3.0.1",
+        "chalk": "^5.4.1",
+        "npm-registry-fetch": "^18.0.2",
+        "ora": "^8.2.0",
+        "semver": "^7.7.2"
+      },
+      "bin": {
+        "aikido-npm": "bin/aikido-npm.js",
+        "aikido-npx": "bin/aikido-npx.js",
+        "aikido-pnpm": "bin/aikido-pnpm.js",
+        "aikido-pnpx": "bin/aikido-pnpx.js",
+        "aikido-yarn": "bin/aikido-yarn.js",
+        "safe-chain": "bin/safe-chain.js"
+      }
     }
   }
 }

package.json

@@ -1,49 +1,26 @@
 {
-  "name": "@aikidosec/safe-chain",
+  "name": "aikido-safe-chain-workspace", 
-  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "workspaces": ["packages/*"],
   "scripts": {
-    "test": "node --test --experimental-test-module-mocks 'src/**/*.spec.js'",
+    "test": "npm run test --workspace=packages/safe-chain",
-    "test:watch": "node --test --watch --experimental-test-module-mocks 'src/**/*.spec.js'",
+    "lint": "npm run lint --workspace=packages/safe-chain"
-    "lint": "eslint ."
   },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/AikidoSec/safe-chain.git"
   },
-  "bin": {
-    "aikido-npm": "bin/aikido-npm.js",
-    "aikido-npx": "bin/aikido-npx.js",
-    "aikido-yarn": "bin/aikido-yarn.js",
-    "aikido-pnpm": "bin/aikido-pnpm.js",
-    "aikido-pnpx": "bin/aikido-pnpx.js",
-    "safe-chain": "bin/safe-chain.js"
-  },
-  "type": "module",
-  "keywords": [],
   "author": "Aikido Security",
   "license": "AGPL-3.0-or-later",
-  "description": "The Aikido Safe Chain wraps around the [npm cli](https://github.com/npm/cli), [npx](https://github.com/npm/cli/blob/latest/docs/content/commands/npx.md), [yarn](https://yarnpkg.com/), [pnpm](https://pnpm.io/), and [pnpx](https://pnpm.io/cli/dlx) to provide extra checks before installing new packages. This tool will detect when a package contains malware and prompt you to exit, preventing npm, npx, yarn, pnpm, or pnpx from downloading or running the malware.",
-  "dependencies": {
-    "@inquirer/prompts": "^7.4.1",
-    "abbrev": "^3.0.1",
-    "chalk": "^5.4.1",
-    "npm-registry-fetch": "^18.0.2",
-    "ora": "^8.2.0",
-    "semver": "^7.7.2"
-  },
   "devDependencies": {
     "@eslint/js": "^9.26.0",
     "eslint": "^9.26.0",
-    "eslint-plugin-import": "^2.31.0",
+    "eslint-plugin-import": "^2.31.0", 
     "globals": "^16.1.0",
     "typescript-eslint": "^8.32.0"
   },
-  "main": "eslint.config.js",
-  "bugs": {
-    "url": "https://github.com/AikidoSec/safe-chain/issues"
-  },
-  "homepage": "https://github.com/AikidoSec/safe-chain#readme",
   "overrides": {
     "brace-expansion@<=2.0.2": "2.0.2"
   }
-}
+}

packages/safe-chain/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@aikidosec/safe-chain",
+  "version": "1.0.0",
+  "scripts": {
+    "test": "node --test --experimental-test-module-mocks 'src/**/*.spec.js'",
+    "test:watch": "node --test --watch --experimental-test-module-mocks 'src/**/*.spec.js'",
+    "lint": "eslint ."
+  },
+  "bin": {
+    "aikido-npm": "bin/aikido-npm.js",
+    "aikido-npx": "bin/aikido-npx.js",
+    "aikido-yarn": "bin/aikido-yarn.js",
+    "aikido-pnpm": "bin/aikido-pnpm.js",
+    "aikido-pnpx": "bin/aikido-pnpx.js",
+    "safe-chain": "bin/safe-chain.js"
+  },
+  "type": "module",
+  "keywords": [],
+  "author": "Aikido Security",
+  "license": "AGPL-3.0-or-later",
+  "description": "The Aikido Safe Chain wraps around the [npm cli](https://github.com/npm/cli), [npx](https://github.com/npm/cli/blob/latest/docs/content/commands/npx.md), [yarn](https://yarnpkg.com/), [pnpm](https://pnpm.io/), and [pnpx](https://pnpm.io/cli/dlx) to provide extra checks before installing new packages. This tool will detect when a package contains malware and prompt you to exit, preventing npm, npx, yarn, pnpm, or pnpx from downloading or running the malware.",
+  "dependencies": {
+    "@inquirer/prompts": "^7.4.1",
+    "abbrev": "^3.0.1",
+    "chalk": "^5.4.1",
+    "npm-registry-fetch": "^18.0.2",
+    "ora": "^8.2.0",
+    "semver": "^7.7.2"
+  },
+  "main": "src/main.js",
+  "bugs": {
+    "url": "https://github.com/AikidoSec/safe-chain/issues"
+  },
+  "homepage": "https://github.com/AikidoSec/safe-chain#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AikidoSec/safe-chain.git",
+    "directory": "packages/safe-chain"
+  }
+}