Craig Andrews

@eddiemonge @ianschmitz what are your thoughts on this? I believe it addresses the concerns expressed in my earlier PR, and I think it would be a great improvement to CRA....

@iansu @amyrlam @mrmckeb @ianschmitz @petetnt Can you please take a look at this PR? I believe that this approach to removing console statements from production builds is easy, safe, maintainable,...

@ianschmitz @eddiemonge @mrmckeb @petetnt (and anyone else) can you _please_ look at this PR? I believe it meets all requirements for a contribution and addresses an issue requested by CRA...

@juhovh can you please create a release?

> The only handling of return code in a script in my view would be a check for success or failure My use case is that I want to differentiate...

Perhaps a better approach would be to set the vulnerability's name to something more logical than just the id at https://github.com/jeremylong/DependencyCheck/blob/56058e5dc3bd44d261f0a81a69be130dfd143823/core/src/main/java/org/owasp/dependencycheck/analyzer/AbstractNpmAnalyzer.java#L455 To be specific, instead of: ```java vuln.setName(String.valueOf(advisory.getId())); ``` How...

I'm trying to help - the more the merrier!

I'm seeing this issue as well - do you have a guess when this fix may be made? Thanks!

NPM seems to be becoming the javascript package repository for both client and server side purposes. For example, Webpack uses NPM only by default, and jquery is published only to...

> This has become more important for Spring Boot 3.0 Another example is `ch.qos.logback.classic.helpers.MDCInsertingServletFilter`. In logback version 1.2.10, included in Spring Boot 3.0.0-M1, that class references `javax.servlet.Filter` which isn't available.