3 ms·
I've used esbuild's metadata file to filter npm audit's report and only warn for packages with files that are required at runtime. It's great at filtering out d
by seniorsassycat 5y ago
I've used esbuild's metadata file to filter npm audit's report and only warn for packages with files that are required at runtime. It's great at filtering out denial of service in the command line parser of my web server.
- mylesborins 5y agoThis sounds SUPER interesting. Do you have an example of this? I wonder if this is something we could adopt in npm itself
- seniorsassycat 5y agohttps://github.com/everett1992/npm-esbuild-audit https://github.com/everett1992/npm-esbuild-audit