https://github.com/dependabot/yarn-lib
A build of yarn that provides access to its internals
https://github.com/dependabot/yarn-lib
Last synced: 9 months ago
JSON representation
A build of yarn that provides access to its internals
- Host: GitHub
- URL: https://github.com/dependabot/yarn-lib
- Owner: dependabot
- Created: 2017-09-21T15:49:39.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2024-04-17T22:59:06.000Z (over 1 year ago)
- Last Synced: 2025-04-12T02:38:31.973Z (9 months ago)
- Language: Shell
- Size: 58.6 KB
- Stars: 18
- Watchers: 8
- Forks: 18
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Codeowners: CODEOWNERS
Awesome Lists containing this project
README
# Yarn Lib
## WARNING
Do not use this in your own projects. This repo is only needed for Dependabot to support Yarn v1... it's not needed for Yarn v2/v3. Wherever possible we prefer to use public APIs such as the `yarn` CLI rather than hacks like this. So whenever we drop support for Yarn v1, this will go away.
## What is it?
As of v1.0, Yarn is distributed as a single bundled .js file, which means it
can no longer be used as a library.
This repo automatically generates builds of yarn that may be used as libraries
and pushes them to the @dependabot/yarn-lib package on npm.
## Steps to Rotate the NPM Access Token
1. Login to the npmjs registry with GitHub work email and password and go to the [Access Tokens](https://www.npmjs.com/settings/ankithoney/tokens) section.
Note: If you do not see `Dependabot org` associated with your npmjs registry account then reach out to your team members in the slack channel [#dependabot-updates-team](https://github.slack.com/archives/C01BKB7EVQX) to send you an invite to join the dependabot org.
2. Click on `Generate new Access Tokens` button and copy the token.
3. Update the [NPM_TOKEN](https://github.com/dependabot/yarn-lib/settings/secrets/actions) with the newly generated token in step 2.
4. Follow the [guide](https://github.com/github/dependabot-updates/blob/main/docs/dependabot-vault-secrets.md) to update the secret `dependabot_npmjs_org_token` in the vault with the newly generated token in step 2.