kripod / pcg.js

A functional implementation of the PCG family random number generators, written in JavaScript.
MIT License
1 stars 1 forks source link

upgrade Ramda to 0.28.0 #2

Closed philihp closed 1 year ago

philihp commented 1 year ago

I'm switching over to using this library, but a dependency tool Sync warns that I have a transitive dependency on a version of Ramda with a potential security hole:

https://security.snyk.io/vuln/SNYK-JS-RAMDA-1582370

While this doesn't seem to impact anything here, would you mind updating to resolve this, and releasing another version?

kripod commented 1 year ago

Unfortunately, I’m not maintaining this project anymore as I barely have any time to work on OSS nowadays 😕

Please feel free to fork the project and release it under a different name or as a scoped npm package.

philihp commented 1 year ago

Happy to do that.

Since you're not maintaining it, would you be amenable to me taking over the pcg package namespace?

philihp commented 1 year ago

https://github.com/philihp/fn-pcg

Doing a few more things here... notably, types and coverage. Forked from your repo; credit where credit's due :)

kripod commented 1 year ago

Thank you, @philihp, I appreciate how much effort you’ve put into this 🙌

I can transfer the pcg package on npm to you — just send me an email with your npm email/username included.

kripod commented 1 year ago

@philihp I’ve just invited you as a collaborator both here and on npm.