pxcloud/pkg-fetch
6
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Update dependencies and remove fixed versioning (#54)

Browse Source 
This patch updates some deps with non-major version changes, and also
relaxes the versioning used in the package.json to allow bugfix
releases.

Using pinned versions is probably a well intentioned but naive
restriction that prevents a consumer from automatically receiving
security fixes unless the package author approves them, which can take a
long time. Pinned dependencies don't work in Node-land anyway, as NPM
will happily give you multiple copies of a specific library at different
versions, and pins do also not prevent transitive dependencies from
including version ranges anyway. For these reasons, it is more a
security risk than a reliability insurance.
This commit is contained in:
Rob Cresswell 2019-01-10 17:51:14 +00:00 committed by Igor Klopov
parent 03f551cd53
commit 1a3454cd75
1 changed files with 20 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
package.json
View File

@ -23,28 +23,28 @@
]
},
"dependencies": {
"babel-runtime": "6.26.0",
"byline": "5.0.0",
"chalk": "2.4.1",
"expand-template": "1.1.1",
"fs-extra": "6.0.1",
"in-publish": "2.0.0",
"minimist": "1.2.0",
"progress": "2.0.0",
"request": "2.85.0",
"request-progress": "3.0.0",
"semver": "5.5.0",
"unique-temp-dir": "1.0.0"
"babel-runtime": "~6.26.0",
"byline": "~5.0.0",
"chalk": "~2.4.1",
"expand-template": "~1.1.1",
"fs-extra": "~6.0.1",
"in-publish": "~2.0.0",
"minimist": "~1.2.0",
"progress": "~2.0.0",
"request": "~2.88.0",
"request-progress": "~3.0.0",
"semver": "~5.6.0",
"unique-temp-dir": "~1.0.0"
},
"devDependencies": {
"ava": "0.25.0",
"babel-cli": "6.26.0",
"babel-eslint": "8.2.3",
"babel-plugin-transform-async-to-generator": "6.24.1",
"babel-plugin-transform-runtime": "6.23.0",
"babel-preset-es2015": "6.24.1",
"babel-register": "6.26.0",
"eslint-config-klopov": "0.13.0"
"ava": "~0.25.0",
"babel-cli": "~6.26.0",
"babel-eslint": "~8.2.3",
"babel-plugin-transform-async-to-generator": "~6.24.1",
"babel-plugin-transform-runtime": "~6.23.0",
"babel-preset-es2015": "~6.24.1",
"babel-register": "~6.26.0",
"eslint-config-klopov": "~0.13.0"
},
"scripts": {
"babel": "node test/rimraf-es5.js && babel lib --out-dir lib-es5",