bin-wrapper

bin-wrapper copied to clipboard

The `download` package should be updated to the latest version (it's 8.0.0 now) which would remove the moderate Dependabot issue, caused by a downstream dependency 'got': https://docs.github.com/en/code-security/dependabot/working-with-dependabot/troubleshooting-dependabot-errors

NinaSabio

Outdated `bin-version-check` dependency - needs version bumping

2

I believe the `bin-version-check` package should be updated to the latest version of 5.0.0 which would remove the high CVE found [here](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3795) caused by a downstream dependency `semver-regex`

KenjiDuggan

Update all the stuff

2

@sindresorhus friendly ping for review :) Let me know if something could be improved, I haven't switched many projects to ESM yet. CI run since it doesn't run yet on...

XhmikosR

This package needs a new maintainer - or an archive-flag

11

This project is stale. No PRs merged since 2018, no commits since 2018. No communication on any issues by the repository-owner. I guess this project should be handed over to...

infabo

Ability to specify base url

4

Adds the ability to specify a base url to use when performing configuration. This allows you to follow the following pattern: ```js const BinWrapper = require('bin-wrapper'); const bin = new...

ConfuddledPenguin

What are valid values for `arch`?

1

The readme only lists `darwin` and `x64` as example values. What other values could be used?

jasonbarry

Update `download` dependency and require Node.js 10

5

Update dependency package called `download` in order to pull in security patch. This also increases required node.js version to 10

tjbulick

use system binary if possible

13

this PR allows using system binaries.

digitalkaoz

High security vulnerability reported due to dependency on decompress

3

As reported by `npm audit`: ``` ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ High │ Arbitrary File Write │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ decompress │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Patched in │ No patch available │ ├───────────────┼──────────────────────────────────────────────────────────────┤...

jimmyandrade

prefer to use system binary if available

2

Hi, it were nice if bin wrapper would just use the systems binaries if available. This especially makes sense for alpine Linux where static compiled binaries often do not work....

torvitas