high severity vulnerability in cross-spawn

[grybykm]

trafficstars

# npm audit report

cross-spawn  <7.0.5
Severity: high
Regular Expression Denial of Service (ReDoS) in cross-spawn - https://github.com/advisories/GHSA-3xgq-45jj-v275

"npm-run-all": "^4.1.5"

[soluml]

"overrides": {
  "cross-spawn": "~7.0.5"
}

Not a long-term fix by any means but the above will address the issue in absence of the fix.

[ramicohen303]

Is this project still maintained?

[TannerS]

Is this project still maintained?

Wondering the same thing

[Jasperrr91]

Is this project still maintained?

Nope it is not, this one is though:

https://www.npmjs.com/package/npm-run-all2

It seems like there have been multiple attempts to reach out to @mysticatea but he does not seem to reply. He is still commiting to repos and on those repos I see people discussing ownership of eslint-plugins as well. Seems like he just does not read his messages.