New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

findup-sync v2 relies on insecure dependancies #11

Open

carpiediem opened this issue Apr 2, 2020 · 1 comment · May be fixed by #14

carpiediem commented Apr 2, 2020 •

edited

Loading

Dependencies include kind-of v3 and braces v2. The current release of findup-sync is 4.0.0

joscha linked a pull request

that will close this issue

feat: git worktree support #14

Open

tilman commented Jul 27, 2023

As a workaround you can add this to your package.json (works with pnpm or yarn):

{
  ...
  "resolutions": {
    "findup-sync": "^4.0.0"
  }
  ...
}

The package seems to work with findup-sync 4.0.0 without any problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment