ewilliams28/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-12 21:53:00 -06:00
Code Issues Packages Projects Releases Wiki Activity

fix(plugins): apply npm overrides to managed roots (#78386)

Browse Source
This commit is contained in:
Vincent Koc
2026-05-06 02:47:25 -07:00
committed by GitHub
parent b895c6d939
commit 5d557171b3
6 changed files with 264 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/tools/plugin.md
+3
View File
@@ -162,6 +162,9 @@ managed npm root. After npm finishes, OpenClaw verifies the installed
`package-lock.json` entry still matches the resolved version and integrity. If
npm writes different package metadata, the install fails and the managed package
is rolled back instead of accepting a different plugin artifact.
Managed npm roots also inherit OpenClaw's package-level npm `overrides`, so
security pins that protect the packaged host also apply to hoisted external
plugin dependencies.
Source checkouts are pnpm workspaces. If you clone OpenClaw to hack on bundled
plugins, run `pnpm install`; OpenClaw then loads bundled plugins from