fix(mama): always remove ./node_modules/.bin from integrity hash

[fraxken]

No description provided.

[changeset-bot]

🦋 Changeset detected

Latest commit: f2a6e6e

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@nodesecure/mama	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[Copilot]

Pull Request Overview

This PR fixes the packageJSONIntegrityHash function to always remove ./node_modules/.bin/ prefixes from package scripts when computing integrity hashes, regardless of whether the package comes from a remote registry. Previously, this normalization only occurred for packages from remote registries.

• Simplified the logic by always applying removeNodeModulesBin to scripts
• Updated the test to verify the behavior works consistently for both local and remote registry scenarios

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
workspaces/mama/src/utils/integrity-hash.ts	Removed conditional logic and always apply removeNodeModulesBin to scripts
workspaces/mama/test/packageJSONIntegrityHash.spec.ts	Enhanced test to verify behavior for both undefined and { isFromRemoteRegistry: true } options

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}