Add approved trace files for payload, @trpc/server, @trpc/client, zod, superjson, @payloadcms/db-postgres, @payloadcms/richtext-lexical, globals, react, react-dom, vitest, @tanstack/react-query, and all @testing-library/* packages. All traces dated 2026-05-14, decision: approved, adr: null. Establishes the baseline so the pre-commit library-decisions gate is additive (new deps require traces) rather than disruptive (old deps fail immediately). All 34 trace files pass validateTrace() from schema.mjs. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2.6 KiB
package, version, tier, decision, date, deciders, adr, filter-results, verification-commands, accepted-cves
| package | version | tier | decision | date | deciders | adr | filter-results | verification-commands | accepted-cves | ||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| globals | ^17.6.0 | core | approved | 2026-05-14 |
|
null |
|
|
Filter: license
npm view globals license returns MIT. MIT is on the allowlist.
Filter: types
globals ships its own TypeScript declaration files. No separate @types/globals package is needed.
Filter: maintenance
Maintained by the Sindre Sorhus ecosystem. Regularly updated to track ECMAScript specification changes and new browser/Node.js globals. Last release < 18 months.
Filter: boundary-fit
globals is a dependency of @repo/core-eslint, the shared ESLint configuration package. It provides the global variable definitions consumed by ESLint's languageOptions.globals configuration. This is the correct placement for a configuration-layer utility.
Filter: shadow-check
globals is the de-facto standard globals catalog for ESLint configurations. No competing globals package is present in the workspace.
Filter: eu-residency
globals is a static data package (JSON + TypeScript types) with no network communication. EU residency does not apply.
Filter: cve-scan
pnpm audit --audit-level=moderate reports no advisories against globals at the time of this trace.
Filter: named-consumer
@repo/core-eslint uses globals in its ESLint flat-config exports to declare browser and Node.js global environments. Named, non-hypothetical consumer exists today.
Prompt: replaces
globals replaces the deprecated env configuration approach in ESLint's legacy config format. In the flat config system, languageOptions.globals with the globals package is the recommended approach.
Prompt: migration-cost-out
Mechanical. globals is used in one configuration file (@repo/core-eslint). Migrating to a different globals source requires updating that file only.
Prompt: alternatives-considered
- Inline global declarations — Verbose and maintenance-heavy; the
globalspackage is the ESLint ecosystem standard for this purpose. @types/nodeglobals only — Insufficient for browser environments;globalscovers both environments cleanly.