Matt Jarrett

Results 6 comments of Matt Jarrett

[npm outlines a as of Mar 29th, 2021](https://npmjs.com/advisories/1654) ``` y18n before versions 3.2.2, 4.0.1, and 5.0.5 is vulnerable to prototype pollution. ``` [CVE-2020-7774](https://nvd.nist.gov/vuln/detail/CVE-2020-7774)

I'm running into this out of the blue on ~~one~~ two of my apps w/ husky 7.0.4. I've deleted `node_modules`, `package-lock.json` and ran `npm install` to rebuild them w/ no...

I solved my occurance of this with @pinalbhatt 's suggestion of `npm set-script prepare "" && npm ci --only=production`.

Can we start this? I think `main` is [settled](https://github.blog/2020-07-27-highlights-from-git-2-28/#introducing-init-defaultbranch) and even `git` is [implementing this as the default branch](https://public-inbox.org/git/4360881016dd204c63288ee04588db1a469a6752.1608167230.git.gitgitgadget@gmail.com/).

Hi @sonaye 👋 Would you mind making the repo you reference public?