Skip to content

Conversation

@legobeat
Copy link
Collaborator

@legobeat legobeat commented Oct 2, 2024

This is the first release of this fork under the new name @lavamoat/sourcemap-validator.

Changes from v2.1.0

diff

@legobeat legobeat requested a review from a team October 2, 2024 05:51
@legobeat legobeat self-assigned this Oct 2, 2024
@legobeat legobeat changed the base branch from master to main October 2, 2024 07:25
Copy link
Member

@boneskull boneskull left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What prompted this fork? Vulns in those lodash packages?

@boneskull
Copy link
Member

IMO as long as we're here, we should rip out lodash:

  • forEach is not needed
  • template can be replaced with template literals

@legobeat
Copy link
Collaborator Author

legobeat commented Oct 2, 2024

Vulns in those lodash packages?

For lodash-template yes (see linked PR), that's part of it. We also at minimum want #2 and probably #3.

@legobeat legobeat merged commit 4898143 into main Oct 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants