brianloveswords / base64url

For encoding and decoding base64url!
MIT License
225 stars 44 forks source link

Updating package.json with a Node.js engine >= 6.0.0 clause #36

Closed jeffwilcox closed 6 years ago

jeffwilcox commented 6 years ago

This adds an engine clause to require Node.js >= 6.0.0 for this package.

Hoping this might help the vulnerability data sources confusing people to no longer consider this version vulnerable, since it only impacts Node.js versions <= 4 (i.e. ancient Node). Also added some verbiage to link to the Node.js LTS schedule repo...

Open to suggestions but wanted to at least offer this if interested!

jeffwilcox commented 6 years ago

Full disclosure - this also removes Node v4 from the Travis configuration

MylesBorins commented 6 years ago

Doing this would likely be Semver-Major. Would make sense to batch it with other Semver-Major changes