add ci workflow for test

.github/workflows/ci.yml

@@ -0,0 +1,27 @@
+name: CI
+
+on:
+  pull_request:
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
+
+      - name: Enable corepack
+        run: corepack enable
+
+      - name: Setup Node.js
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444
+        with:
+          node-version: 22.20.0
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Lint package.json metadata
+        run: pnpm lint:package-json

.gitignore

@@ -0,0 +1,2 @@
+node_modules
+.pnpm-store

.npmpackagejsonlintrc.json

@@ -0,0 +1,8 @@
+{
+  "rules": {
+    "no-caret-version-dependencies": "error",
+    "no-tilde-version-dependencies": "error",
+    "prefer-absolute-version-dependencies": "error",
+    "prefer-absolute-version-devDependencies": "error"
+  }
+}

.npmrc

@@ -0,0 +1 @@
+save-exact = true

package.json

@@ -0,0 +1,22 @@
+{
+  "name": "pnpm-security-demo",
+  "version": "1.0.0",
+  "description": "Sample project managed by pnpm",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "start": "node src/index.js",
+    "lint:package-json": "pnpm exec npmPkgJsonLint ."
+  },
+  "dependencies": {
+    "aws-cdk": "2.1029.1"
+  },
+  "devDependencies": {
+    "npm-package-json-lint": "9.0.0"
+  },
+  "volta": {
+    "node": "22.20.0",
+    "pnpm": "10.17.1"
+  },
+  "packageManager": "pnpm@10.17.1"
+}