Giters

babel / babel-eslint

:tokyo_tower: A wrapper for Babel's parser used for ESLint (renamed to @babel/eslint-parser)

Home Page:https://github.com/babel/babel/tree/main/eslint/babel-eslint-parser

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Bump lodash version to avoid security alerts from yarn and github

damianobarbati opened this issue · comments

commented

It's time to bump lodash version!

Screenshot 2019-08-30 at 12 57 31

commented

It doesn’t look like babel-eslintuses lodash directly, so this would need to be updated in the respective package that does.

commented

@damianobarbati may have to update your babel deps (maybe even manually remove entries from lockfile), as latest versions should all use lodash@4.17.13

Ref:
https://unpkg.com/browse/@babel/types@7.5.5/package.json

commented

There is a handy tool called yarn-deduplicate which should help you in this case

yarn-deduplicate --packages lodash yarn.lock
commented

Thank you for the PR. Now that @babel/eslint-parser has been released, we are making this repository read-only. If this is a change you would still like to advocate for, please reopen this in the babel/babel monorepo.