bobbai00 opened a new issue, #4461:
URL: https://github.com/apache/texera/issues/4461

   ### What happened?
   
   \`jschardet\` (npm) is LGPL-2.1, an ASF Category X license, and cannot ship 
in an Apache binary distribution. It is pulled in transitively by the direct 
dependency \`@codingame/monaco-vscode-api\` (declared in 
\`frontend/package.json\` as \`"vscode": 
"npm:@codingame/[email protected]"\`).
   
   ### How to reproduce?
   
   \`\`\`
   grep -A3 '^"vscode@npm' frontend/yarn.lock
   \`\`\`
   
   Output shows \`@codingame/monaco-vscode-api\` declares \`jschardet: 
"npm:3.1.3"\` in its dependencies.
   
   ### Version
   
   1.1.0-incubating (Pre-release/Master)
   
   ### Commit Hash (Optional)
   
   ef663648d
   
   ### Proposed fix
   
   Options:
   - Replace \`@codingame/monaco-vscode-api\` with a narrower Monaco/VS Code 
API integration that does not ship charset detection.
   - Use Yarn's \`resolutions\` or an import map to stub \`jschardet\` with a 
no-op compatible shim at build time.
   - Remove the codepath that triggers \`jschardet\` loading and mark it as an 
explicitly unsupported VS Code feature in Texera's frontend.
   
   ### Was this authored or co-authored using generative AI tooling?
   
   Generated-by: Claude Code (Claude Opus 4.7)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to