dependabot just opened a PR on my project for preboot 5.1.7. We're currently on 5.0.0-rc13 and things work fine.
I'm kinda sketched out by it. There's no tag for that release on this repository, no commits associated with that release, and I haven't seen active development on this repository for months now.
Is v5.1.7 legit? What's in it? If not, it's probably worth reviewing who's got NPM privileges/tokens for this repository.
dependabot just opened a PR on my project for preboot 5.1.7. We're currently on 5.0.0-rc13 and things work fine.
I'm kinda sketched out by it. There's no tag for that release on this repository, no commits associated with that release, and I haven't seen active development on this repository for months now.
Is v5.1.7 legit? What's in it? If not, it's probably worth reviewing who's got NPM privileges/tokens for this repository.