Results 594 comments of Paul Miller

Question: Do we actually want to support ES3 browsers? Their market share is like super low

I personally love BDD. It's very easy to read code. @cscott ?

I guess the project was abandoned. @sstephenson ping?

Does not look like idiomatic coffeescript to me. 1. You should use single quotes when not using interpolation. 2. No need to use braces at lines 10-11. 3. No need...

It is not vulnerable, so the bug is bogus, you need to report this issue to Github support, which errorneusly added the cve to dependabot

https://github.com/github/advisory-database/pull/531

1. This is useless, it does not fix anything. There is no vulnerability in glob-parent 5.1.2. https://github.com/advisories/GHSA-cj88-88mr-972w is wrong, see https://snyk.io/vuln/npm:glob-parent 2. This would break your support for nodejs v8.

The alert is false, report this to GitHub: https://github.com/github/advisory-database/pull/531

cc @guidovranken who is a world-class fuzzer - he may find this library and fuzzing ideas interesting