Josh Hardy

Weird CJS module hack is bombing Rollup builds

2

https://github.com/JS-DevTools/ono/blob/a1fa89a25e7432f7615af8b4179f842b5affccf2/src/index.ts#L10-L13 This code block is bombing my rollup build. Not caught during build. This code makes it into the bundle, and then it fails on runtime startup. `module.exports.default` is undefined...

Upgrade mkdirp due to vulnerability in old version

3

Trying to work back through each node module for `bunyan` to fix a vulnerability. `[email protected]` has a vulnerable package `[email protected]` which needs to be fixed. Updating to the latest version...

mv dependency vulnerable

3

I created an issue on that project: https://github.com/andrewrk/node-mv/issues/33 `mv` hasn't been updated in 6 years. It has a vulnerable version of `mkdirp` which has since been updated to completely removed...