df12-lints is deliberately unpublished ("private": true) and is consumed as
a git dependency pinned to a release tag. Add it to package.json with a tag
reference rather than a bare commit SHA:
{
"devDependencies": {
"df12-lints": "github:leynos/df12-lints#v0.1.0"
}
}
The package builds its root entry point (dist/index.js) during install
through a prepare script, so no manual build step is required. npm and Yarn
run a git dependency's prepare script automatically. Bun blocks dependency
lifecycle scripts by default; a Bun consumer must allow this build by listing
the package in trustedDependencies:
{
"trustedDependencies": ["df12-lints"]
}
The df12-lints/oxlint-plugin subpath resolves to committed source and works
even when the prepare script has not run.