set-value security fix - Githubissues

ceruleanlabs / marco

Simple CLI tool for fetching list of projects which are ready for a release

https://www.npmjs.com/package/marco-cli

MIT License

0 stars 0 forks source link

set-value security fix #28

Open bergren2 opened 4 years ago

bergren2 commented 4 years ago

bump Webpack so we're working with similar dependencies down the road
upgrade Snapdragon as a dependency so it's using a patched version of set-value
bump Webpack CLI so the builds work again

bergren2 commented 4 years ago

Okay, this has been an open issue for years: https://github.com/nickmerwin/node-coveralls/issues/80

Noticed a Microsoft team (https://github.com/microsoft/vscode-python/issues/6340) focused on making sure the builds still passed even if sending to Coveralls failed, and then eventually switched to Codecov. Another option is to switch off of Travis CI. I'd advocate for a similar approach.