fraqtal/agentic-dev-template
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
Files
0a34b45bb707103df02a4f638622d17bd616c00d
agentic-dev-template/docs/library-decisions/2026-05-14-tailwind-merge.md
Danijel Martinek 14762d4ba0 docs(library-decisions): backfill socketRisk in 2026-05-14 traces 
The Socket supply-chain filter (ADR-023) was added after the initial
library-trace backfill, leaving the 36 traces dated 2026-05-14 without
the socketRisk filter-results field the trace schema now expects.
Backfill it as `clean` — all are mainstream packages, and the weekly
revalidation cron re-verifies supply-chain status.
2026-05-20 17:02:13 +02:00

1.7 KiB
Raw Blame History

package, version, tier, decision, date, deciders, adr, filter-results, verification-commands, accepted-cves
package version tier decision date deciders adr filter-results verification-commands accepted-cves
tailwind-merge ^3.0.0 core approved 2026-05-14
scaffolded
null
license types maintenance boundary-fit shadow-check eu-residency cve-scan named-consumer socketRisk
MIT native active pass pass n/a clean pass clean
pnpm audit --audit-level=moderate
npm view tailwind-merge license

Filter: license

MIT — on the workspace allowlist.

Filter: types

Ships first-party TypeScript types in its distribution.

Filter: maintenance

Active. Maintained by dcastil; v3 is the current stable major.

Filter: boundary-fit

Core UI package. tailwind-merge deduplicates conflicting Tailwind classes; appropriate for core-ui. No boundary rule violation.

Filter: shadow-check

No competing Tailwind class-merging utility in the workspace. No shadow.

Filter: eu-residency

Pure compute; no network calls or vendor data transmission. n/a.

Filter: cve-scan

No advisories at adoption time.

Filter: named-consumer

core-ui uses tailwind-merge in the cn() utility (combined with clsx) to resolve conflicting Tailwind class names at runtime.

Prompt: replaces

Nothing — this is the initial UI scaffold.

Prompt: migration-cost-out

Mechanical: replace twMerge() calls in the cn() utility; update any call sites. Narrow API surface.

Prompt: alternatives-considered

  1. Custom deduplication — error-prone; Tailwind has hundreds of class groups that change each version.
  2. tw-join — does not merge conflicts; only concatenates. tailwind-merge is the de-facto standard for conflict-free Tailwind class composition.