Home Original page

security: override cross-spawn to ^7.0.6 (pnpm) by thomasrockhu-codecov · Pull Request #307 · codecov/codecov-javascript-bundler-plugins

@thomasrockhu-codecov

@thomasrockhu-codecov 

npm-run-all@4.1.5 still resolves cross-spawn 6.0.5 under its semver range;
execa via serve pulled 7.0.3. Force patched 7.0.6+ for all instances to
address cross-spawn ReDoS advisories (GHSA-3xgq-45jj-v275).

Made-with: Cursor