Skip to content

Pin dependencies#621

Open
legendecas wants to merge 2 commits intomainfrom
npm_workspace
Open

Pin dependencies#621
legendecas wants to merge 2 commits intomainfrom
npm_workspace

Conversation

@legendecas
Copy link
Copy Markdown
Member

This pins all dependencies with a workspace package-lock.json (excluding the website/ folder)

@legendecas
Copy link
Copy Markdown
Member Author

Going to merge this addressing a security advisary.

},
"scripts": {
"install": "npx cmake-js compile",
"install": "cmake-js compile",
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

question: This uses cmake-js but there is no dependency entry for it. Should there be...?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, updated!

"node-addon-api": "^8.1.0"
},
"scripts": {
"install": "node-gyp rebuild && node test"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this intentional to remove node test as well?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, the test should not run on install script.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Need Triage

Development

Successfully merging this pull request may close these issues.

3 participants