You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Deprecation of v10.1.5, v10.1.6, v10.1.7, v10.1.8, v10.1.9
Subscribe to this issue to receive critical updates on this advisory.
Summary
Applies to:
@achrinza/node-ipc@^10
Deprecated:
@achrinza/node-ipc@10.1.5
@achrinza/node-ipc@10.1.6
@achrinza/node-ipc@10.1.7
@achrinza/node-ipc@10.1.8
@achrinza/node-ipc@10.1.9
Replacement:
@achrinza/node-ipc@10.1.10
Description
Out of an abundance of caution,v10.1.5, v10.1.6, v10.1.7, v10.1.8, v10.1.9 have been deprecated in favor of v10.1.10 as they contained nested transient production dependencies that are managed by @/riaevangelist (The original author of node-ipc).
The offending transient development dependencies are:
v10.1.10 resolves this issue by replacing strong-type@1.1.8 with @achrinza/strong-type, which depends on pinned versions of @node-ipc/vanilla-test. There are no functional code changes in v10.1.10.
At the time of writing, we have no reason to believe that any of these dependencies had any malicious code. However, this may change in the future and we strongly recommend upgrading the v10 version range to ^10.1.10.
Deprecation of
v10.1.5
,v10.1.6
,v10.1.7
,v10.1.8
,v10.1.9
Subscribe to this issue to receive critical updates on this advisory.
Summary
Applies to:
@achrinza/node-ipc@^10
Deprecated:
@achrinza/node-ipc@10.1.5
@achrinza/node-ipc@10.1.6
@achrinza/node-ipc@10.1.7
@achrinza/node-ipc@10.1.8
@achrinza/node-ipc@10.1.9
Replacement:
@achrinza/node-ipc@10.1.10
Description
Out of an abundance of caution,
v10.1.5
,v10.1.6
,v10.1.7
,v10.1.8
,v10.1.9
have been deprecated in favor of v10.1.10 as they contained nested transient production dependencies that are managed by @/riaevangelist (The original author ofnode-ipc
).The offending transient development dependencies are:
@achrinza/node-ipc@10.1.5/10.1.6/10.1.7/10.1.8/10.1.9
strong-type@1.1.8
1.1.8
vanilla-test@*
v10.1.10 resolves this issue by replacing
strong-type@1.1.8
with@achrinza/strong-type
, which depends on pinned versions of@node-ipc/vanilla-test
. There are no functional code changes in v10.1.10.At the time of writing, we have no reason to believe that any of these dependencies had any malicious code. However, this may change in the future and we strongly recommend upgrading the v10 version range to
^10.1.10
.References
The text was updated successfully, but these errors were encountered: