jason810496 opened a new pull request, #71399: URL: https://github.com/apache/airflow/pull/71399
## Why The TypeScript SDK package needs a fail-closed check that prevents unintended source, test, configuration, or credential files from reaching npm. ## How - Build and pack the SDK into a temporary directory. - Enforce an explicit runtime artifact allowlist. - Install the tarball into an isolated consumer and smoke-test its public import and executable. ## What - Add the `verify:package` command and manual prek hook. - Omit JavaScript and declaration source maps from the published build. - Document local package verification. --- ##### Was generative AI tooling used to co-author this PR? - [x] Yes, with help of Codex GPT-5 following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
