1a3454cd75
This patch updates some deps with non-major version changes, and also relaxes the versioning used in the package.json to allow bugfix releases. Using pinned versions is probably a well intentioned but naive restriction that prevents a consumer from automatically receiving security fixes unless the package author approves them, which can take a long time. Pinned dependencies don't work in Node-land anyway, as NPM will happily give you multiple copies of a specific library at different versions, and pins do also not prevent transitive dependencies from including version ranges anyway. For these reasons, it is more a security risk than a reliability insurance. |
||
|---|---|---|
| lib | ||
| patches | ||
| test | ||
| .eslintignore | ||
| .gitignore | ||
| license.md | ||
| package.json | ||
| places.json | ||
| readme.md | ||
pkg-fetch
Github Releases page of this project contains base binaries,
used by pkg to create executables. pkg-fetch npm package
downloads base binaries or compiles them from source.