.commitlintrc.js

@@ -0,0 +1,11 @@
+// This file is automatically added by @npmcli/template-oss. Do not edit.
+
+module.exports = {
+  extends: ['@commitlint/config-conventional'],
+  // If you change rules be sure to also update release-please.yml
+  rules: {
+    'type-enum': [2, 'always', ['feat', 'fix', 'docs', 'chore', 'deps']],
+    'header-max-length': [2, 'always', 80],
+    'subject-case': [0, 'always', ['lower-case', 'sentence-case', 'start-case']],
+  },
+}

.github/CODEOWNERS

@@ -0,0 +1 @@
+*	@npm/cli-team

.github/dependabot.yml

@@ -0,0 +1,16 @@
+# This file is automatically added by @npmcli/template-oss. Do not edit.
+
+version: 2
+updates:
+- package-ecosystem: npm
+  directory: "/"
+  schedule:
+    interval: daily
+  allow:
+    - dependency-type: direct
+  versioning-strategy: increase
+  commit-message:
+    prefix: deps
+    prefix-development: chore
+  labels:
+    - "Dependencies"

.github/workflows/audit.yml

@@ -0,0 +1,23 @@
+# This file is automatically added by @npmcli/template-oss. Do not edit.
+
+name: Audit
+
+on:
+  schedule:
+    # "At 01:00 on Monday" https://crontab.guru/#0_1_*_*_1
+    - cron: "0 1 * * 1"
+  workflow_dispatch:
+
+jobs:
+  audit:
+    name: npm audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: '16'
+      - name: Install deps
+        run: npm i --package-lock
+      - name: Audit
+        run: npm audit

.github/workflows/ci.yml

@@ -8,6 +8,9 @@ on:
     branches:
       - main
       - latest
+  schedule:
+    # "At 02:00 on Monday" https://crontab.guru/#0_2_*_*_1
+    - cron: "0 2 * * 1"
 
 jobs:
   lint:
@@ -17,27 +20,22 @@ jobs:
       - uses: actions/setup-node@v2
         with:
           node-version: '16'
-          cache: npm
       - run: npm i --prefer-online -g npm@latest
-      - run: npm ci
+      - run: npm i
       - run: npm run lint
 
   test:
     strategy:
       fail-fast: false
       matrix:
-        node-version: [12.13.0, 12.x, 14.15.0, 14.x, 16.x]
+        node-version: [12.13.0, 12.x, 14.15.0, 14.x, 16.13.0, 16.x]
         platform:
         - os: ubuntu-latest
           shell: bash
         - os: macos-latest
           shell: bash
-        - os: windows-latest
-          shell: bash
         - os: windows-latest
           shell: cmd
-        - os: windows-latest
-          shell: powershell
     runs-on: ${{ matrix.platform.os }}
     defaults:
       run:
@@ -47,8 +45,18 @@ jobs:
       - uses: actions/setup-node@v2
         with:
           node-version: ${{ matrix.node-version }}
-          cache: npm
-      - run: npm i --prefer-online -g npm@latest
-      - run: npm ci
+        # node 12 and 14 ship with npm@6, which is known to fail when updating itself in windows
+      - name: Update to workable npm (windows)
+        if: matrix.platform.os == 'windows-latest' && (startsWith(matrix.node-version, '12') || startsWith(matrix.node-version, '14'))
+        run: |
+          curl -sO https://registry.npmjs.org/npm/-/npm-7.5.4.tgz
+          tar xf npm-7.5.4.tgz
+          cd package
+          node lib/npm.js install --no-fund --no-audit -g ..\npm-7.5.4.tgz
+          cd ..
+          rmdir /s /q package
+      - name: Update npm
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - run: npm i
       - run: npm test --ignore-scripts
-      - run: npm ls -a

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,38 @@
+# This file is automatically added by @npmcli/template-oss. Do not edit.
+
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ main ]
+  schedule:
+    # "At 03:00 on Monday" https://crontab.guru/#0_3_*_*_1
+    - cron: "0 3 * * 1"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'javascript' ]
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1

.github/workflows/post-dependabot.yml

@@ -0,0 +1,35 @@
+# This file is automatically added by @npmcli/template-oss. Do not edit.
+
+name: "Post Dependabot Actions"
+on: pull_request
+
+# https://docs.github.com/en/rest/overview/permissions-required-for-github-apps
+permissions:
+  contents: write
+
+jobs:
+  Install:
+    runs-on: ubuntu-latest
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: '16'
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v1.1.1
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+      - name: npm install and commit
+        if: ${{contains(steps.metadata.outputs.dependency-names, '@npmcli/template-oss')}}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          git config --local user.email "ops+npm-cli@npmjs.com"
+          git config --local user.name "npm cli ops bot"
+          gh pr checkout ${{ github.event.pull_request.number }}
+          npm install
+          git add .
+          git commit -am "chore: postinstall for dependabot template-oss PR"
+          git push

.github/workflows/pull-request.yml

@@ -0,0 +1,27 @@
+# This file is automatically added by @npmcli/template-oss. Do not edit.
+
+name: Pull Request Linting
+
+on:
+  pull_request:
+    types: [opened, reopened, edited, synchronize]
+
+jobs:
+  check:
+    name: Check PR Title or Commits
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v2
+        with:
+          node-version: '16'
+      - name: Install deps
+        run: |
+          npm i -D @commitlint/cli @commitlint/config-conventional
+      - name: Check commits OR PR title
+        env:
+          PR_TITLE: ${{ github.event.pull_request.title }}
+        run: |
+          npx commitlint -x @commitlint/config-conventional -V --from origin/main --to ${{ github.event.pull_request.head.sha }} || echo $PR_TITLE | npx commitlint -x @commitlint/config-conventional -V

.github/workflows/release-please.yml

@@ -0,0 +1,24 @@
+# This file is automatically added by @npmcli/template-oss. Do not edit.
+
+name: Release Please
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: google-github-actions/release-please-action@v2
+        id: release
+        with:
+          release-type: node
+          # If you change changelog-types be sure to also update commitlintrc.js
+          changelog-types: >
+            [{"type":"feat","section":"Features","hidden":false},
+            {"type":"fix","section":"Bug Fixes","hidden":false},
+            {"type":"docs","section":"Documentation","hidden":false},
+            {"type":"deps","section":"Dependencies","hidden":false},
+            {"type":"chore","hidden":true}]

.gitignore

@@ -4,15 +4,20 @@
 /*
 
 # keep these
+!/.commitlintrc.js
+!/.npmrc
 !/.eslintrc*
 !/.github
 !**/.gitignore
 !/package.json
-!/package-lock.json
+!/docs
 !/bin
 !/lib
 !/map.js
 !/tap-snapshots
 !/test
+!/scripts
 !/README*
 !/LICENSE*
+!/SECURITY*
+!/CHANGELOG*

.npmrc

@@ -0,0 +1,3 @@
+;This file is automatically added by @npmcli/template-oss. Do not edit.
+
+package-lock=false

CHANGELOG.md

@@ -1,6 +1,32 @@
 # Changelog
 
+### [2.0.2](https://www.github.com/npm/map-workspaces/compare/v2.0.1...v2.0.2) (2022-03-10)
+
+
+### Bug Fixes
+
+* evaluate all patterns before throwing EDUPLICATEWORKSPACE ([#32](https://www.github.com/npm/map-workspaces/issues/32)) ([ca0bf18](https://www.github.com/npm/map-workspaces/commit/ca0bf18d4852017c3befc3c908baf29e6e72a55f))
+
+
+### Dependencies
+
+* update minimatch requirement from ^5.0.0 to ^5.0.1 ([#28](https://www.github.com/npm/map-workspaces/issues/28)) ([5c4fd0d](https://www.github.com/npm/map-workspaces/commit/5c4fd0d28d19539fdb9df85bcafcc7122b3702b0))
+
+### [2.0.1](https://www.github.com/npm/map-workspaces/compare/v2.0.0...v2.0.1) (2022-02-17)
+
+
+### Bug Fixes
+
+* normalize backslashes ([777e4d3](https://www.github.com/npm/map-workspaces/commit/777e4d3a8670b94dba91e4305ce2b846fc02b7d8))
+
+
+### Dependencies
+
+* bump minimatch from 3.1.1 to 4.1.1 ([305629e](https://www.github.com/npm/map-workspaces/commit/305629e32609451af7ce8b6464dde224ab5dcc7a))
+* bump minimatch from 4.2.1 to 5.0.0 ([2098531](https://www.github.com/npm/map-workspaces/commit/2098531776a31172a3664097b769e83cb8dbe682))
+* update glob requirement from ^7.1.6 to ^7.2.0 ([588b229](https://www.github.com/npm/map-workspaces/commit/588b22938dd514b806dea4f6cb76298c4d468b3a))
+* update read-package-json-fast requirement from ^2.0.1 to ^2.0.3 ([0eeb67d](https://www.github.com/npm/map-workspaces/commit/0eeb67d2dff646553321957438d9b9d86202e8b7))
+
 ## 0.0.0-pre.0
 
 - Initial pre-release.
-

SECURITY.md

@@ -0,0 +1,3 @@
+<!-- This file is automatically added by @npmcli/template-oss. Do not edit. -->
+
+Please send vulnerability reports through [hackerone](https://hackerone.com/github).