Open barbara79 opened 1 year ago
Latest commit: f2ee24206c52c848c3caec1f8049aea558aa2a35
Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.
Click here to learn what changesets are, and how to add one.
Click here if you're a maintainer who wants to add a changeset to this PR
The
get-package
library is not maintained anymore see here: https://github.com/changesets/changesets/blob/main/packages/get-workspaces/src/index.ts There are some libraries connected to theget-package
library that are vulnerable.The same is for the library
package-json
, it has a vulnerable version of the librarygot
so it needs to be updated too.If you could please update the library as I suggested