Move nyc from dependencies to devDependencies #17
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Hi @herumi, thanks for this great library, we are using it for the
EIP-2537
BLS precompile implementation for our JavaScript EVM! 😄We currently have the problem though that the
nyc
package currently being in thedependencies
of the library is pulling in a hell lot of security vulnerabilities - some marked ashigh
- when runningnpm audit
on the library.Would it be possible to merge and do a patch release on this relatively quickly? We are planning to do a new major version on the VM in two weeks and will feature-freeze at the end of next week (sorry, stumbled upon this a bit late in the process), and I'm afraid that we would otherwise have to disable the
EIP-2537
support for now for security reasons.That would be great and super helpful! 🙂