bonsai icon indicating copy to clipboard operation
bonsai copied to clipboard

Understand the tree of dependencies inside your webpack bundles, and trim away the excess.

Results 55 bonsai issues
Sort by recently updated
recently updated
newest added

Bumps [codecov](https://github.com/codecov/codecov-node) from 3.6.5 to 3.8.3. Release notes Sourced from codecov's releases. v3.8.3 Fixes #329 fix: Test if response has two lines Dependencies #306 Bump eslint-config-prettier from 7.2.0 to 8.3.0...

dependencies

Bumps [eventsource](https://github.com/EventSource/eventsource) from 1.0.7 to 1.1.1. Changelog Sourced from eventsource's changelog. 1.1.1 Do not include authorization and cookie headers on redirect to different origin (#273 Espen Hovlandsdal) 1.1.0 Improve performance...

dependencies

Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.14 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependencies

Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.4.7 to 1.5.10. Commits 8cd4c6c 1.5.10 ce7a01f [fix] Improve handling of empty port 0071490 [doc] Update JSDoc comment a7044e3 [minor] Use more descriptive variable name d547792 [security]...

dependencies

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.7.0 to 1.14.8. Commits 3d81dc3 Release version 1.14.8 of the npm package. 62e546a Drop confidential headers across schemes. 2ede36d Release version 1.14.7 of the npm package. 8b347cb...

dependencies

Bumps [undefsafe](https://github.com/remy/undefsafe) from 2.0.2 to 2.0.5. Release notes Sourced from undefsafe's releases. v2.0.5 2.0.5 (2021-10-17) Bug Fixes remove debug and add tests (58fc474), closes #12 Commits 5d3fa34 chore: adding semver...

dependencies

Bumps [shelljs](https://github.com/shelljs/shelljs) from 0.8.3 to 0.8.5. Release notes Sourced from shelljs's releases. v0.8.5 This was a small security fix for #1058. v0.8.4 Small patch release to fix a circular dependency...

dependencies

Snyk has created this PR to upgrade multiple dependencies. 👯‍♂ The following dependencies are linked and will therefore be updated together. :information_source: Keep your dependencies up-to-date. This makes it easier...

Snyk has created this PR to upgrade object.values from 1.1.0 to 1.1.5. :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify...

Snyk has created this PR to upgrade array-includes from 3.0.3 to 3.1.4. ![merge advice](https://app.snyk.io/badges/merge-advice/?package_manager=yarn&package_name=array-includes&from_version=3.0.3&to_version=3.1.4&pr_id=e6364845-d059-47df-9241-60040f6530a5&visibility=true&has_feature_flag=false) :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more...