Fix severe vulnerability in cross-spawn; convert project from CommonJS to ES Modules#10
Fix severe vulnerability in cross-spawn; convert project from CommonJS to ES Modules#10aasmith2021 wants to merge 13 commits into
Conversation
|
Hi @yyx990803! I really enjoy using
There's an advisory about a severe vulnerability using cross-spawn < 7.0.5, and I wanted to remove that vulnerability so that Let me know if you see anything that needs to be updated - I'm happy to make any changes! |
Literally came here looking to see if |
|
Hi @yyx990803! Thank you for your work on There seems to be some community interest in keeping it up to date. If you have a moment, I’d really appreciate your feedback. Totally understand if time is limited — just wanted to offer a small contribution to help. Thanks again! |
|
Came here for this exact issue. Would be great to have this PR merged in. @aasmith2021 thanks for your work! |
Description
This PR updates
yorkiefrom using CommonJS modules to ES Modules, and updates all dependencies to the latest version. As a result, the version of Node needed to runyorkieis now at least version 20.6.0.Updating the dependencies to the latest version fixes a severe vulnerability found in the
cross-spawndependency.