Commit 640193d
committed
Move @babel/cli from dependencies to devDependencies
@babel/cli is a build tool not used at runtime by consumers of this
package. Having it in dependencies pulls in glob and minimatch as
transitive deps, which carry high-severity ReDoS vulnerabilities
(GHSA-3ppc-4f35-3m26). Moving it to devDependencies eliminates these
vulnerabilities for all downstream consumers.1 parent fd26d23 commit 640193d
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
16 | 16 | | |
17 | 17 | | |
18 | 18 | | |
19 | | - | |
20 | 19 | | |
21 | 20 | | |
22 | 21 | | |
| 22 | + | |
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
| |||
0 commit comments