Skip to content

Conversation

@maitxn
Copy link
Contributor

@maitxn maitxn commented Aug 25, 2025

What approach did you choose and why?

  • Overrides the tmp version 0.2.5 manually in package.json to fix the dependabot alert.

Risk Assessment

  • Low risk changes are small, highly observable, and easily rolled back.

@wraithgar
Copy link
Member

wraithgar commented Aug 25, 2025

$ npm view [email protected] dependencies.tmp
^0.2.1
$ npm view [email protected] dependencies.tmp
^0.2.1

Why do we need an override here?

ETA: it's this one

└─┬ [email protected]
  ├─┬ [email protected]
  │ └── [email protected]

@wraithgar wraithgar closed this Aug 25, 2025
@wraithgar wraithgar deleted the maitxn/dependabot-14082 branch October 14, 2025 16:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants