-
Notifications
You must be signed in to change notification settings - Fork 290
Open
Description
Problem
The fix from PR #508 (@babel/eslint-parser should be in devDependencies) has been merged, but it does not seem to be included in a published npm release.
Evidence
- Merged PR: @babel/eslint-parser should be in devDependencies #508
- Fix commit:
aa5ac4651474b8a443ef9285f86376734442f0df - Latest Git tag:
v0.7.22 - npm dist-tag currently shows
latest: 0.7.21
Reproduction
npm init -y
npm install klaro@0.7.22
npm auditThis still reports vulnerabilities (transitively via @babel/eslint-parser / eslint).
When installing the fix commit directly, the audit is clean:
npm init -y
npm install git+https://github.com/kiprotect/klaro.git#aa5ac4651474b8a443ef9285f86376734442f0df
npm auditRequest
Could you please publish a new npm release that includes the fix from PR #508 and update the latest dist-tag accordingly?
Thank you.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels