mdn/workflows

Using npx/global installs vs. relying on repo's dependencies

nschonni opened this issue · 0 comments

EX: the shared workflow uses npx

npx markdownlint-cli '*.md' -i LICENSE.md -i CODE_OF_CONDUCT.md

Where the downstream repo uses it's own yarn.lock version
https://github.com/mdn/content/blob/46104c1adfef5d2d696711324aa7007634bba4a7/.github/workflows/markdown-lint.yml#L27-L34

Should the shared repos assume downstream fixed dependency and script names, or hoist it's own lock file that needs to be synced. The downstream repos likely can't drop those dependencies, as they're used for things like Husky hooks