Artículo
en
The Bun Dependabot Gap: Dependabot Alerts Don't See bun.lock
Fuente: Nicolas Charpentier's Blog ·
GitHub's dependency graph doesn't read bun.lock yet, so in Bun projects Dependabot alerts only cover what's written in package.json, and never a transitive dependency. Here's how to check if you're affected, and how I closed the gap with a GitHub Action.
Más como esto
-
Ardbeg Ten Cask Strength
Artículo · Whisky and Wisdom
-
The etiquette and politics of whisky write-ups and reviews
Artículo · Whisky and Wisdom
-
The Glendronach “Ode to….” series
Artículo · Whisky and Wisdom
-
Jack Daniel’s 10 Years Old
Artículo · Whisky and Wisdom
-
Glenfiddich 16 Aston Martin
Artículo · Whisky and Wisdom
-
Falkirk Distillery
Artículo · Whisky and Wisdom