Elliot Segler

This is the code I'm referencing: https://github.com/DependencyTrack/dependency-track/blob/026b504d27c692674eeca0bad32fcb22428b8b02/src/main/java/org/dependencytrack/policy/VersionDistancePolicyEvaluator.java#L102-L106

I agree, it'd be good to get that resolved but for anyone else hunting to see what the impact is I've done some digging. > jsrsasign uses very small part...

I bundled a couple of these fixes together, please let me know if you'd rather I split it into multiple PRs.

Have you checked the logs for the lambda@edge functions to confirm they are functioning correctly? I ran into similar issues with the generated edge configuration files not being valid.. (See...

@NickDarvey I'm wondering if that's an ordering issue... The cross-region-reader-handler and associated `Custom::CrossRegionReader` resource get added to the stack that consumes the exports. That handler is capable of removing the...

> However I saw elsewhere somebody was entering node-id as the sub device id I just did that too and it works for me. Thanks @michaelblight

@mrgrain: can you elaborate on > Note that defining cdkVersion: '2.50.0' will already result in a version constraint of ^2.50.0. It does look like that behavior yields a peerDependency with...