prebuild-install
prebuild-install copied to clipboard
Remove `rc` dependency
Thanks for taking the initiative. Note that in the context of prebuild-install, the fork doesn't fix known bugs and rc has no open vulnerabilities. I'm aware though of GHSA-g2q5-5433-rhrf. I doubt that moving ownership from one person to another single person is the long-term solution to protect against supply chain attacks. Switching dependencies here could be good for the short term, were it not for the fact that rc is not essential here. If we're gonna spend any time on this (prebuild-install itself has a replacement) it should be to just remove rc.
+1 for removing rc altogether