Closed pvcresin closed 1 year ago
Chore summary
spectral-cli is connected to vm2 deep in the dependencies.
vm2 has security issues and is no longer maintained.
Even if the dependent libraries support the update, it may take some time for spectral-cli to reflect the changes. So, is there any way to prevent vm2 from being included as a dependency on the spectral-cli side?
Tasks
Additional context
In the latest version, vm2 was missing from the dependencies. Sorry for the lack of confirmation.
Chore summary
spectral-cli is connected to vm2 deep in the dependencies.
vm2 has security issues and is no longer maintained.
Even if the dependent libraries support the update, it may take some time for spectral-cli to reflect the changes. So, is there any way to prevent vm2 from being included as a dependency on the spectral-cli side?
Tasks
Additional context