You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Snyk check was failing those PRs as the lockfile being inconsistent w/ the deps(-dev) that are listed in our package.json — we can't have this as being flagged by Snyk (unacceptable).
We currently have a couple of deps that we need to either replace or bundle w/ the deployed package (thanks to socket for flagging them as trivial):
has-unicode
has issues related to triviality (and more) #57supports-ansi
has issues related to triviality (and more) #58We also have a problem of the npm lockfile version changing from 2 to 3 in npm@9
Does this mean that we should switch to either pnpm for their lockfile at this point, or maybe Yarn?
I don't really mind either way, but the problematic lockfile bump is going to be something to watch out for:
The Snyk check was failing those PRs as the lockfile being inconsistent w/ the deps(-dev) that are listed in our package.json — we can't have this as being flagged by Snyk (unacceptable).
/cc @shellscape
The text was updated successfully, but these errors were encountered: