Marc Bernard

sure, a button would work as well

too, bad. https://www.npmjs.com/package/redos-detector is the other one I know of. it takes an AST from a parser as input.

Set the log level to [`debug`](https://verdaccio.org/docs/6.x/logger). then you can see in the log how the audit request is forwarded to registry.npmjs.com and what kind of error is returned to verdaccio.

In the most simple terms, the new badge will match the green check, yellow dot, or red cross that you see in GitHub next to a commit. If the commit...

Indeed. The new service works on repo level. It is therefore suitable to include such badge into READMEs for showing the latest status. In contrast, the other services require a...

Similar but not the same: Here's the best explanation I could find: https://stackoverflow.com/a/72312617 Imho, the description of the existing badge (#5973) should be changed to "GitHub tag status", "GitHub commit...

Sounds good. I will adjust the GH commit status in a separate PR. PS: It will have to wait until GH check run PR is merged because it comes from...

Suggest closing this since you can use `prerelease` instead of undocumented `pre`: ```bash > npx semver -i premajor 0.0.0 1.0.0-0 > npx semver -i prerelease 1.0.0-0 1.0.0-1 > npx semver...

Old issue but imho, getting an error is essential here. The implementation in another release might (probably will) have different behaviour. It would be a big assumption that you can...

`ajv` is a major contributor to the `[DEP0040] DeprecationWarning: The `punycode` module is deprecated` issue that is popping up everywhere (since it's used in `eslint`). Please fix this. Less dependencies....