search

paulmillr / es6-shim

ECMAScript 6 compatibility shims for legacy JS engines
http://paulmillr.com
MIT License
3.11k stars 387 forks source link

About update a new release #477

Closed juranjun closed 1 year ago

juranjun commented 1 year ago

About this issue, we hope have a new release version if possible, thks https://github.com/paulmillr/es6-shim/issues/475

Could you update a new release please, we also need new release for es6-shim in our front-end code, This software is very useful for us, our commiter expects a newer release version of es6-shim (the update time of the last version is too long from now, 2 years ago), so we expect you to upgrade a new version if possible, thank u.

ljharb commented 1 year ago

v0.35.7 has been published. It only contains a single fix.

The time since last publish is irrelevant - software is not "out of date" or "insecure" because it was last published decades ago, let alone years ago. Any system you have that naively complains about not updating things that have published no updates is harming your security.

juranjun commented 1 year ago

Thanks very much, our committer thinks that no update for a long time, may be the software is inactive, but I don't think so.

ljharb commented 1 year ago

Your committee is worse than incorrect; their stance will lead to much less secure applications.