Skip to content

Conversation

@uniqueiniquity
Copy link
Contributor

Some of the dependencies of cpx are flagged for security vulnerabilities. Since that package hasn't updated in 2 years, I think it's unlikely that it will upgrade and allow for newer versions of its dependencies.

Therefore, rather than trying to mess with the package.json to try to force a higher version of a dependency, this PR aims to use copyfiles instead of cpx.

@uniqueiniquity uniqueiniquity merged commit e632043 into microsoft:master Jan 31, 2019
@uniqueiniquity uniqueiniquity deleted the replaceCPX branch January 31, 2019 21:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants