Add yarn as devDependency and update the cache

wollardj / simple-plist

A simple API for interacting with binary and plain text plist data.

MIT License

57 stars 22 forks source link

Add yarn as devDependency and update the cache #73

Open trufae opened 1 year ago

trufae commented 1 year ago

This PR fixes the git commit by adding the missing yarn devdependency (systemwide deps are a no-go), and also updates plist to the 3.0.6 because 3.0.5 have a critical vulnerability.

Funny or not npm audit cant find that issue.

More details here: https://github.com/advisories/GHSA-4cpg-3vgw-4877

trufae commented 1 year ago

i would appreciate if this pr gets merged and a new version of simple-plist is released