Skip to content

Conversation

@wojtekmaj
Copy link

Recently in this repo, we've seen some efforts (#7, #8) to cope with (according to some, including myself-) hijacked traverse package.

This PR replaces traverse with neotraverse, a fork and TypeScript rewrite of traverse with 0 dependencies and lots of improvements.

Recently in this repo, we've seen some efforts (bendrucker#7, bendrucker#8) to cope with (according to some, including myself-) hijacked traverse package.

This PR replaces traverse with neotraverse, a fork and TypeScript rewrite of traverse with 0 dependencies and lots of improvements.
@bendrucker
Copy link
Owner

Does this actually fix a problem? I'm declaring this package frozen, unless there is an urgent performance/security issue with the pinned version of traverse I'm not keen to participate in continued bikeshedding.

@talentlessguy
Copy link

semantic-release depends on git-log-parser so because of that traverse is pulled.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants