David Sherret

> I manage some ~/ config files via git, so my home directory is a git repo. Wonder if that could have an influence? (Though I already tested to rename...

Oh, I never saw markup_fmt until now. It seems great! If you believe it is well tested, we should add it the dprint website.

I'm thinking that https://github.com/dprint/dprint/issues/941 might solve this issue.

That's a slightly different issue. For that issue it was when the package.json existed in the current working directory and wasn't used. In this case, the dependency `http-signature` of `activitypub-express`...

Not at the moment because git dependencies are not supported/implemented. If they remove the git dependency and depend on npm instead then it might work: https://github.com/immers-space/activitypub-express/blob/364d90705731dca755f3cb21747274eba0aad1e4/package.json#L35

@tmcw there is now a PR for that here: https://github.com/denoland/deno/pull/24170

@und-miller I can't reproduce #17802, which #24170 fixes. Can you open a new issue with a reproduction?

That's a different issue than https://github.com/denoland/deno/issues/17802

No update. It's challenging because we need to figure out the security story for it and probably need to add another flag (something like `--allow-npm-git=github.com/some-org/some-repo`).

Alternatively consider creating a single SHASUMS256.txt file similar to what Node does: https://nodejs.org/download/release/v14.9.0/SHASUMS256.txt I'm not sure what the advantages are one over the other though.