chore(release): drop attw from pack-scan

tools/release/check.mjs

@@ -33,7 +33,7 @@ export async function runCheck() {
   step("build bailian-cli");
   run("pnpm", ["--filter", "bailian-cli", "run", "build"]);
 
-  step("pack + scan (publint, attw, gitleaks)");
+  step("pack + scan (publint, gitleaks)");
   packAndScan({ log });
 
   log("\nrelease check passed.");

tools/release/lib/pack-scan.mjs

@@ -13,10 +13,6 @@ function extractTarball(tarball, tempDir, key) {
   return extractDir;
 }
 
-/**
- * pnpm pack each package, then run publint / attw / gitleaks on the tarball
- * or the extracted directory. attw only runs on packages that declare types.
- */
 export function packAndScan({ log }) {
   const tempDir = mkdtempSync(join(tmpdir(), "bailian-release-"));
   try {
@@ -29,11 +25,6 @@ export function packAndScan({ log }) {
       log(`publint ${pkg.name}`);
       run("npx", ["--yes", "publint", extractDir]);
 
-      if (json.types) {
-        log(`attw ${pkg.name}`);
-        run("npx", ["--yes", "@arethetypeswrong/cli", "--pack", extractDir]);
-      }
-
       log(`gitleaks ${pkg.name}`);
       run("gitleaks", ["detect", "--source", extractDir, "--no-git", "--redact"]);
     }