nodeca / argparse

CLI arguments parser for node.js. JS port of python's argparse module.
Other
487 stars 73 forks source link

Patch older versions of ArgParse as well #134

Closed ghost closed 5 years ago

ghost commented 5 years ago

The DEV of remarkable is refusing to update his dependency on ArgParse because he believes you should patch ALL versions of ArgParse, therefore he shouldn't have to update to the latest version to get rid of some security warning triggered by older versions of ArgParse in NPM...

While I don't understand this mentality, is this something you could do?

puzrin commented 5 years ago

No ideas. This package has only one dependency (i don't count devdeps). If you can tell exactly where the problem is - i can check what can be done.

puzrin commented 5 years ago

Ah, missed world "older" in title. Sorry, no plans to support ancient versions. All versions have stable/compatible API. If someone don't like to change deps - that should not become my problem.

Also, you can switch to https://github.com/markdown-it/markdown-it. It's more actual.