# SPDX-License-Identifier: PMPL-1.0-or-later
name: NPM/Bun Blocker
on: [push, pull_request]

permissions:
  contents: read

jobs:
  check:
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Block npm/bun
        run: |
          if [ -f "package-lock.json" ] || [ -f "bun.lockb" ] || [ -f ".npmrc" ]; then
            echo "❌ npm/bun artifacts detected. Use Deno instead."
            exit 1
          fi
          echo "✅ No npm/bun violations"
