Problem
The fix from PR #508 (@babel/eslint-parser should be in devDependencies) has been merged, but it does not seem to be included in a published npm release.
Evidence
Reproduction
npm init -y
npm install klaro@0.7.22
npm audit
This still reports vulnerabilities (transitively via @babel/eslint-parser / eslint).
When installing the fix commit directly, the audit is clean:
npm init -y
npm install git+https://github.com/kiprotect/klaro.git#aa5ac4651474b8a443ef9285f86376734442f0df
npm audit
Request
Could you please publish a new npm release that includes the fix from PR #508 and update the latest dist-tag accordingly?
Thank you.
Problem
The fix from PR #508 (
@babel/eslint-parser should be in devDependencies) has been merged, but it does not seem to be included in a published npm release.Evidence
aa5ac4651474b8a443ef9285f86376734442f0dfv0.7.22latest: 0.7.21Reproduction
This still reports vulnerabilities (transitively via
@babel/eslint-parser/eslint).When installing the fix commit directly, the audit is clean:
Request
Could you please publish a new npm release that includes the fix from PR #508 and update the
latestdist-tag accordingly?Thank you.