Anton Stefer comments

Repositories
Issues
Comments

Results 3 comments of


                                            Anton Stefer

[BUG] devDependencies of project with npm-shrinkwrap.json are getting installed

Commenting for visibility. Not sure if you're responsible @nlf but this deserves some attention.

Updating safe dependencies to fix some vulnerabilities

Why has this been stale for so long? @joehan @bkendall @yuchenshi firebase-tools is still depending on old versions of node-fetch and node-forge which include severe vulnerabilities. From what I can...

Updating safe dependencies to fix some vulnerabilities

Thanks for the detailed reply, I am sure you are all doing your best. However, this package is still by far the biggest troublemaker in most of my projects in...