ym-project

I dislike it too. But in fact this vulnerability is not harmful because this package doesn't interact with the outside world and is used only locally.

Hi @Sanshain Firstly, you should not use `write: true/false` option because the plugin rewrite it to `false` anyway. Gulp works with virtual files so the plugin sets `write: false` to...

It seems like esbuild reads files from file system when these files come from `import` or `require` statements. I think I can not fix this because the problem concerns the...

Hi @Sanshain again! I created an [issue](https://github.com/evanw/esbuild/issues/2638) and the author of esbuild gave the advise. He suggested to create a plugin which will intercept file import and replace their content....

I have weekly dependabot (for npm and cargo), and: - `Mar 10, 2025, 12:07 AM GMT+3` - ok (there are no labels) - `Mar 17, 2025, 12:23 AM GMT+3` -...

> Is this related to [#12345](https://github.com/dependabot/dependabot-core/issues/12345) ? The same problem. Leave empty label list and dependabot adds its own anyway.