Skip to content

gh-dep-risk 0.1.8

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Apr 12:05
· 29 commits to main since this release
v0.1.8
541fe2e
  • Fixed local fallback against large lockfiles returned by the GitHub contents API with encoding=none by following the blob object instead of failing early.
  • Treated npm and Yarn file/workspace-linked packages consistently as local during fallback analysis so they are excluded from external registry age lookups and external transitive attribution.
  • Aligned README, RELEASING, CONTRIBUTING, AGENTS, and smoke-test docs with the shipped support matrix: GitHub dependency review for multiple ecosystems, and local fallback for npm, pnpm, and Yarn Classic only.
Assets 14
Loading