Hacktoberfest 2026:维护者为十月标记出来的 issue,仍然开放、适合新手。 浏览 Hacktoberfest issue

TypeScript Dockerfiles (filesystem, memory, sequentialthinking) ignore the workspace lockfile and overrides

未关闭 适合新手
#5,345 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

维护者通常 1 天内回复

还没有人认领这个 Issue。

评估

难度
2/5
预计耗时
1-3 小时
新手友好度
78/100
Issue 类型
缺陷
描述清晰度
描述清楚
活跃度
活跃
技术栈
docker, node.js, typescript

调研方向

比较 src/everything/Dockerfile 及其 Docker 忽略文件与 filesystem、memory 和 sequentialthinking 的 Dockerfile。首先检查现有镜像如何使用根目录锁定文件、workspace 安装和非 root 用户,然后将相同的方法应用到指定的三个镜像。从仓库根目录构建每个镜像,并确认安装过程使用锁定文件、正确省略开发依赖项,且以非 root 用户运行。

由索引模型根据 Issue 内容生成。

描述

chore server-filesystem server-memory server-sequentialthinking v2

Problem

The Dockerfiles for filesystem, memory and sequentialthinking build (since #5147 moved them to node:24-alpine, see #4782), but they do not install what this repository tested:

  • The workspace lockfile and overrides are ignored. Each builder stage copies src/<server> alone and runs a lockfile-less npm install, which resolves every dependency fresh on the day of the build. The root package-lock.json and the root package.json overrides (the pins for transitive advisories: qs, hono, proxy-addr, ip-address, …) never reach the image. Example from the everything image built the same way: it installed [email protected], where the lockfile has 6.16.0.
  • --omit-dev is not an npm flag. npm ci --ignore-scripts --omit-dev prints npm warn Unknown cli config "--omit-dev"; dev dependencies are left out only because NODE_ENV=production is set. The flag is --omit=dev.
  • They run as root (the TypeScript half of #4741, which covers the Python images).

Reproduce

docker build -f src/filesystem/Dockerfile -t fs-check . 2>&1 | grep -E 'omit-dev|added'

Expected

Each image installs from the root lockfile with npm ci --workspace src/<server>, building from the repository root as context, with a src/<server>/Dockerfile.dockerignore allow-list. #3309's PR does this for everything (src/everything/Dockerfile); the same shape applies to the other three. Out of scope for #3309, which concerns everything only.

主要语言
TypeScript
星标
91.6k
派生
11.9k
平均合并
4 小时 31 分钟
30 天内合并 PR
236

环境准备

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

modelcontextprotocol/servers 的其他 Issue

查看 modelcontextprotocol/servers 的全部 Issue

相似的 Issue

更多 TypeScript Issue

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。