Skip to content

Security enhancements - #83

Merged
TwitchBronBron merged 1 commit into
masterfrom
fix/npm-audit-vulnerabilities
Aug 7, 2026
Merged

Security enhancements#83
TwitchBronBron merged 1 commit into
masterfrom
fix/npm-audit-vulnerabilities

Conversation

@TwitchBronBron

Copy link
Copy Markdown
Member

Summary

  • brace-expansion and ip-address are pulled in exclusively through devDependencies (bslint, brighterscript, rooibos-roku, ropm) — this package has no runtime npm dependencies at all
  • Pin patched versions via overrides, same pattern already used for serialize-javascript

Test plan

  • `npm run audit` passes
  • `npm run build` passes
  • `npm run build-tests` passes

🤖 Generated with Claude Code

brace-expansion and ip-address are pulled in exclusively through
devDependencies (bslint, brighterscript, rooibos-roku, ropm) --
this package has no runtime npm dependencies at all. Pin patched
versions via overrides, same pattern already used for
serialize-javascript.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@TwitchBronBron TwitchBronBron added the Security enhancements Security-related dependency/vulnerability fixes label Aug 6, 2026
@TwitchBronBron TwitchBronBron changed the title Fix devDependency-only npm audit vulnerabilities via overrides Security enhancements Aug 7, 2026
@TwitchBronBron
TwitchBronBron merged commit e77afdd into master Aug 7, 2026
6 of 10 checks passed
@TwitchBronBron
TwitchBronBron deleted the fix/npm-audit-vulnerabilities branch August 7, 2026 01:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Security enhancements Security-related dependency/vulnerability fixes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant