[Pkg-javascript-devel] npm and yarnpkg vuln

Paolo Greppi paolo.greppi at libpf.com
Mon Dec 16 18:16:18 GMT 2019


https://blog.daniel-ruf.de/critical-design-flaw-npm-pnpm-yarn/
https://github.com/yarnpkg/yarn/issues/7761

I will look at updating yarnpkg to 1.21.1 ...

P.



More information about the Pkg-javascript-devel mailing list