fix(npm): cache failed package checks briefly

[harlan-zw]

🔗 Linked issue

❓ Type of change

• 📖 Documentation
• 🐞 Bug fix
• 👌 Enhancement
• ✨ New feature
• 🧹 Chore
• ⚠️ Breaking change

📚 Description

Oversized archives and upstream failures repeated package checks because HTTP 503 bypassed the cache.
Cache unavailable results for 60 seconds before returning 503, then retry detection.
Keep found and absent results cached for one hour.

🤖 AI disclosure: Harlan Agent Kit modified this description. My AI open-source policy.

[harlan-github-agent]

🤖 MERGED

Harlan Agent Kit posted this automated review. It is not Harlan's personal review or approval. AI open source policy. Last updated: 2026-10-10 09:15 UTC.

GitHub merged this pull request.

• Logged (10/100): The pull request's behavioural screenshot is unavailable, so its claimed behavior has no inspectable visual evidence; the change itself is verified by code reading and the new unit test. View code Optional follow-up: Re-upload the attachment (or attach an accessible screenshot) to the pull request description before merge.
  • Ask an agent to verify and fix this finding
• Logged (15/100): A corrupt or foreign edge-cache entry under the v3 key can throw inside windowsFor and 500 the package route until the entry expires, because the route omits the validate shape guard the cache module requires when windowsFor dereferences st View code Optional follow-up: Pass validate: value => typeof value === 'object' && value !== null && typeof (value as {_tag?: unknown})._tag === 'string' in the readThroughCache options.
  • Ask an agent to verify and fix this finding

f19bedc1-8d3c-451f-a305-56d4438c1d3a

Selected findings run after merge and open separate pull requests.

[harlan-github-agent]

Harlan Agent Kit posted this automated review. AI open source policy.

Automated Review: READY.

Read the Review results