Skip to content

fix(core): depend on the current @nodevu/parsefiles - #121

Open
botandbang wants to merge 2 commits into
mainfrom
bnb/core-parsefiles
Open

botandbang wants to merge 2 commits into
mainfrom
bnb/core-parsefiles

Conversation

@botandbang

Copy link
Copy Markdown
Contributor

@nodevu/core required @nodevu/parsefiles ^0.0.3, which excludes 1.x, so installs got parsefiles 0.0.3 from npm. That version misses the fix from #107: a release's src files list only the .tar.xz, not the .tar.gz. This bumps the range to ^1.1.0. Core's Alpha test expected 0.0.3's output, and now expects both source archives.

@socket-security

socket-security Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​@​nodevu/​parsefiles@​1.1.0711007386100

View full report

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants