less dumb hack

Author: GauBen

.pnp.cjs

@@ -29,8 +29,7 @@
   "resolutions": {
     "ink@^3.2.0": "patch:ink@npm%3A3.2.0#~/.yarn/patches/ink-npm-3.2.0-2f1df5b094.patch",
     "yoga-layout-prebuilt": "patch:[email protected]#./.yarn/patches/yoga-layout-prebuilt.patch",
-    "tuf-js@npm:^3.0.1": "patch:tuf-js@npm%3A3.0.1#~/.yarn/patches/tuf-js-npm-3.0.1-9135d15fbd.patch",
-    "make-fetch-happen": "npm:[email protected]"
+    "make-fetch-happen": "portal:packages/make-fetch-smaller"
   },
   "dependenciesMeta": {
     "core-js": {

.yarn/cache/tuf-js-patch-cbc202128c-044ae4b0a4.zip

@@ -0,0 +1,5 @@
+# make-fetch-smaller
+
+This package is a drop-in replacement for `make-fetch-happen`, but uses Node.js native `fetch` instead of pulling [79 dependencies.](https://node-modules.dev/graph#install=make-fetch-happen)
+
+It is used by the [sigstore](https://www.npmjs.com/package/sigstore) package and its dependencies to produce the provenance statement for packages published to the npm registry with `yarn npm publish --provenance`.

.yarn/patches/tuf-js-npm-3.0.1-9135d15fbd.patch

@@ -0,0 +1,2 @@
+// eslint-disable-next-line
+module.exports = fetch;

package.json

@@ -0,0 +1,5 @@
+{
+  "name": "make-fetch-smaller",
+  "private": true,
+  "type": "commonjs"
+}

packages/make-fetch-smaller/README.md

@@ -12785,7 +12785,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"is-obj@npm:^2.0.0, make-fetch-happen@npm:[email protected]":
+"is-obj@npm:^2.0.0":
   version: 2.0.0
   resolution: "is-obj@npm:2.0.0"
   checksum: 10/c9916ac8f4621962a42f5e80e7ffdb1d79a3fab7456ceaeea394cd9e0858d04f985a9ace45be44433bf605673c8be8810540fe4cc7f4266fc7526ced95af5a08
@@ -14254,6 +14254,18 @@ __metadata:
   languageName: node
   linkType: hard
 
+"make-fetch-happen@portal:packages/make-fetch-smaller::locator=%40yarnpkg%2Fmonorepo%40workspace%3A.":
+  version: 0.0.0-use.local
+  resolution: "make-fetch-happen@portal:packages/make-fetch-smaller::locator=%40yarnpkg%2Fmonorepo%40workspace%3A."
+  languageName: node
+  linkType: soft
+
+"make-fetch-smaller@workspace:packages/make-fetch-smaller":
+  version: 0.0.0-use.local
+  resolution: "make-fetch-smaller@workspace:packages/make-fetch-smaller"
+  languageName: unknown
+  linkType: soft
+
 "makeerror@npm:1.0.12":
   version: 1.0.12
   resolution: "makeerror@npm:1.0.12"
@@ -20213,7 +20225,7 @@ pem@dexus/pem:
   languageName: node
   linkType: hard
 
-"tuf-js@npm:3.0.1":
+"tuf-js@npm:^3.0.1":
   version: 3.0.1
   resolution: "tuf-js@npm:3.0.1"
   dependencies:
@@ -20224,17 +20236,6 @@ pem@dexus/pem:
   languageName: node
   linkType: hard
 
-"tuf-js@patch:tuf-js@npm%3A3.0.1#~/.yarn/patches/tuf-js-npm-3.0.1-9135d15fbd.patch":
-  version: 3.0.1
-  resolution: "tuf-js@patch:tuf-js@npm%3A3.0.1#~/.yarn/patches/tuf-js-npm-3.0.1-9135d15fbd.patch::version=3.0.1&hash=a89046"
-  dependencies:
-    "@tufjs/models": "npm:3.0.1"
-    debug: "npm:^4.3.6"
-    make-fetch-happen: "npm:^14.0.1"
-  checksum: 10/044ae4b0a428390981624e381b68189921f03f834d7d325db348f27cf777bfcffb56fe3b13fc1f8ed8906824359870ec5bcc8ddd7b4f321cfc518ca3cc620fa8
-  languageName: node
-  linkType: hard
-
 "tunnel-agent@npm:^0.6.0":
   version: 0.6.0
   resolution: "tunnel-agent@npm:0.6.0"