[frantuma]

This is part of the plan to clear the dependency policy findings on the published package. It is independent of the other steps, so it branches from main.

The dependency policy scan reports @types/ramda and types-ramda as a types package among the runtime dependencies, and recommends moving it to devDependencies unless the published .d.ts files reference Ramda types. They do not: after npm run build, nothing under types/ mentions ramda, types-ramda or ts-toolbelt. Consumers therefore never needed these packages, yet every install pulled in @types/ramda, types-ramda and ts-toolbelt. They now leave the production tree, and the package keeps @types/ramda only to type-check its own sources.

Since #80 merged first, a second commit adds all three to the deny-list of the package contract check, so they cannot come back into a consumer's install through any dependency. ts-toolbelt@9.6.0 is older than five years, and the plan expected it to leave the tree with this change.

Testing

Rebased onto main after #78 and #80. The only conflict was the devDependencies block, and npm install --package-lock-only leaves the resolved lockfile unchanged. npm run build, lint, type-check and npm test (570 tests) pass, as do the identifier check and the validator drift check. ./scripts/check-package-contract.sh passes; it installs the packed tarball into a scratch consumer, without @types/ramda, and type-checks every advertised subpath there. Its probe fails on a consumer of the tarball packed before this change, naming @types/ramda, types-ramda and ts-toolbelt with the paths that bring them in.

[mergewatch]

1 file scanned · 4 lines reviewed · 6 specialized agents ran · dependency files detected

🟢 5/5 — Looks good to me
_{Reviewed the diff only — MergeWatch does not build, run tests, or read other checks.}

Diagram — Move @types/ramda from dependencies to devDependencies

graph LR
    A["package.json<br/>dependencies"] -->|remove| B["@types/ramda ~0.32.0"]
    C["package.json<br/>devDependencies"] -->|add| B

Loading

_{Covers files changed in this PR — not the whole system.}

This PR moves @types/ramda from runtime dependencies to devDependencies in the api-languageservice package, as the published `. d.

👍 Looks good to me! I didn’t find anything worth raising in this diff.

ℹ️ Review details — 11,628 tokens · ~$0.0369 · 5.9s

Model	claude-sonnet-4.6
Review time	5.9s
Tokens	11,242 in · 386 out · 11,628 total
Est. cost	~$0.0369 (LLM only)

_{Was this review helpful? React with 👍 or 👎 on this comment.
View full details}