Lorenzo Alberton

Hi @petrbroz , here's a new PR with the latest dependency updates (incl. some vulnerability fixes). Would it possible to merge it and push out a new release? The other...

Try getting GPG keys from a larger pool of servers

3

The Ubuntu keyserver is often unavailable, making the ORB fail (especially from m1 machines - the default keyserver for macos is "keys.openpgp.org"). This PR attempts getting the GPG keys from...

2 vulnerabilities in request > tough-cookie dependency

2

% yarn audit ``` yarn audit v1.22.19 ┌───────────────┬──────────────────────────────────────────────────────────────┐ │ moderate │ tough-cookie Prototype Pollution vulnerability │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Package │ tough-cookie │ ├───────────────┼──────────────────────────────────────────────────────────────┤ │ Patched in │ >=4.1.3 │ ├───────────────┼──────────────────────────────────────────────────────────────┤...