build: move from pnpm to npm

Replace pnpm-lock.yaml with package-lock.json. The security overrides move to
package.json#overrides with their range operators intact, so advisory floors
stay floors. allowBuilds becomes package.json#allowScripts where the listed
package is actually in the tree.

.github/workflows/ci.yml

@@ -15,15 +15,14 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: pnpm/action-setup@v6
 
       - uses: actions/setup-node@v7
         with:
           node-version: '24'
-          cache: 'pnpm'
+          cache: 'npm'
 
       - name: Install dependencies
-        run: pnpm install --frozen-lockfile
+        run: npm ci
 
       - name: Build
-        run: pnpm build
+        run: npm run build

.github/workflows/deploy.yml

@@ -21,18 +21,17 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: pnpm/action-setup@v6
 
       - uses: actions/setup-node@v7
         with:
           node-version: '24'
-          cache: 'pnpm'
+          cache: 'npm'
 
       - name: Install dependencies
-        run: pnpm install --frozen-lockfile
+        run: npm ci
 
       - name: Build
-        run: pnpm build
+        run: npm run build
         env:
           SITE_URL: https://tiennm99.github.io
           SITE_BASE: /mathmax

.gitignore

@@ -20,7 +20,7 @@ node_modules/
 # logs
 npm-debug.log*
 yarn-debug.log*
-pnpm-debug.log*
+npm-debug.log*
 
 # tooling
 *.tsbuildinfo

README.md

@@ -17,15 +17,15 @@ Toán tương tác cho học sinh THCS Việt Nam (lớp 6-9). Số học, Đạ
 
 ## Develop
 
-Yêu cầu: Node 24+, pnpm 11+.
+Yêu cầu: Node 24+, npm.
 
 ```sh
-pnpm install
-pnpm dev          # http://localhost:5173/mathmax/
-pnpm test         # Vitest (geom-engine unit tests)
-pnpm check        # svelte-check + JSDoc strict
-pnpm build        # Static output → build/
-pnpm preview      # Serve build/
+npm install
+npm run dev       # http://localhost:5173/mathmax/
+npm test          # Vitest (geom-engine unit tests)
+npm run check     # svelte-check + JSDoc strict
+npm run build     # Static output → build/
+npm run preview   # Serve build/
 ```
 
 ## Deploy

package.json

@@ -3,7 +3,6 @@
   "version": "0.0.1.0",
   "private": true,
   "type": "module",
-  "packageManager": "pnpm@11.1.1",
   "description": "MathMax — Toán tương tác cho học sinh THCS lớp 6-9. Static site.",
   "scripts": {
     "dev": "vite dev",
@@ -32,5 +31,8 @@
     "prettier-plugin-svelte": "^4.1.1",
     "svelte-check": "^4.7.3",
     "vitest": "^4.1.10"
+  },
+  "overrides": {
+    "cookie": "0.7.2"
   }
 }

pnpm-workspace.yaml

@@ -1,5 +0,0 @@
-allowBuilds:
-  esbuild: true
-
-overrides:
-  cookie: 0.7.2