3 ms·
Agreed, you shouldn't see low risk security warnings by default, they're more appropriate for larger projects, with something to lose. The [1] yarn package man
by gitgud 5y ago
Agreed, you shouldn't see low risk security warnings by default, they're more appropriate for larger projects, with something to lose.
The [1] yarn package manager is much nicer to work with in many more ways.
[1] https://classic.yarnpkg.com/en/ https://classic.yarnpkg.com/en/
- unanswered 5y agoTFA identifies "high risk" false positives too, so this response doesn't seem to have anything to do with them problem as stated by TFA.