data-store
data-store copied to clipboard
v4.1.0 has not been published to npm
Hi!
I see that v4.1.0 hasn't been published on npm. Are there any issues preventing this new minor release?
@jonschlinkert Would love to know if there's anything you need help with to publish the version with types exported! For now we're using the package from sources.
Hmm.... npm has 2.0. Not sure why newer tags are not being published?
while at it set-value and get-value can be updated.
while at it set-value and get-value can be updated.
NPM is now complaining about some vulnerability in set-value
.
set-value <4.0.1
Severity: high
Prototype Pollution in set-value - https://github.com/advisories/GHSA-4jqc-8m5r-9rpr
No fix available
node_modules/set-value
data-store 0.4.0 - 0.9.0 || >=4.0.0
Depends on vulnerable versions of set-value
I've added a pull request to fix vulnerabilities, however, there was a failing test case. Hopefully that gets things moving.
Hey is needed some help to get this moving ?