Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

@swc/cli: Switch to using @xhmikosr/bin-wrapper #72

Merged
merged 2 commits into from
Nov 19, 2024

Conversation

strmer15
Copy link
Contributor

Fixes #54

This change switches out the @mole-inc/bin-wrapper package for the @xhmikosr/bin-wrapper package. The former is (seemingly) unmaintained now and has a vulnerability on the execa version that is pulled in from bin-check v4. From what I can see, both packages are forks of the bin-wrapper package, with each making some slight tweaks and updates to dependencies. The only notable difference I can see is that @xhmikosr/bin-wrapper has dropped support for Node < 18 while @mole-inc/bin-wrapper says that it supports Node 12 and up.

Copy link

changeset-bot bot commented Nov 18, 2024

🦋 Changeset detected

Latest commit: 9b37301

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@swc/cli Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@CLAassistant
Copy link

CLAassistant commented Nov 18, 2024

CLA assistant check
All committers have signed the CLA.

Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@xhmikosr/bin-wrapper@13.0.5 Transitive: environment, filesystem, network, shell +52 1.34 MB xhmikosr

🚮 Removed packages: npm/@mole-inc/bin-wrapper@8.0.1, npm/@types/node@20.11.5

View full report↗︎

@kdy1 kdy1 merged commit aaec3de into swc-project:main Nov 19, 2024
3 of 10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

Vulnerability in transitive execa dependency
3 participants