build: replace unmaintained temp dependency with fs.mkdtemp

[claude]

Requested by Samuel Attard · Slack thread

Closes #581

Before / After

Before: The package pulled in the unmaintained temp npm module (plus its @types/temp typings) solely to create a tracked temporary directory. src/temp-utils.ts called temp.track() and exposed a promisified temp.mkdir as createTempDir.

After: The package uses Node's built-in fs.mkdtemp (via the already-present fs-extra) with os.tmpdir(). No third-party dependency is required, and temp / @types/temp are removed from package.json and the yarn lockfile.

How

src/temp-utils.ts now implements createTempDir(prefix) by calling fs.mkdtemp(path.join(os.tmpdir(), prefix)). The exported function signature is unchanged ((prefix: string) => Promise<string>), so all callers (src/index.ts and the specs/helpers) work without modification.

Cleanup semantics are preserved. temp.track() automatically removed created temp directories when the process exited. To match that behavior, the module keeps an array of the directories it creates and registers a single process.on('exit', ...) handler that removes each of them synchronously (best-effort, errors ignored). This mirrors the prior auto-cleanup-on-exit behavior that the test suite relied on, so no manual cleanup was needed in callers.

Test / build status

• yarn build (tsc): passes.
• yarn lint (eslint): passes.
• yarn ava: unit tests pass. The two installer-spec tests and sign-spec fail in this environment because they require Windows (or Mono + Wine) to run Squirrel/signing — these failures occur before any temp-dir logic and are unrelated to this change. The temp-directory helpers (createTempAppDirectory, createTempDir) are exercised by the passing/attempted tests without error.

---

Generated by Claude Code