mirror of
https://github.com/pezkuwichain/pezkuwi-api.git
synced 2026-10-20 18:56:29 +00:00
- @pezkuwi/typegen requires handlebars ^4.7.9; 4.7.8 and earlier are affected by the open handlebars advisories - yarn.lock: tar, ip-address, brace-expansion, fast-uri, js-yaml, node-forge, postcss, lodash, ws and the other flagged transitive packages resolve to patched releases within their declared ranges The flagged packages still on an affected version are reached only through the @pezkuwi/dev tool chain (webpack-dev-server 4, eslint 8, gh-release), which pins their major versions; they are development tools and are not part of any published package.