Native-build dep in serverless target
Part of the Dependency supply chain check · fix arrives as a guide
What it is
A dependency requiring native compilation is present in a project that deploys to a serverless or edge runtime.
Why it matters
It fails in two situations. On an edge or Workers runtime a native module cannot load at all. On ordinary Node serverless the platform usually compiles against the target image and it works — unless your pipeline uploads a locally-built node_modules, in which case the binary is compiled for the wrong platform and libc.
How to fix it
Replace it with a pure-JavaScript or WASM equivalent, or move the work that needs it to a container-based service. If it must stay, build against the exact runtime image the platform uses.
Run them all on your app
Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.