[Pkg-javascript-devel] Bug#959788: node-bluebird: Please remove dependency to node-cross-spawn

yadd at debian.org yadd at debian.org
Tue May 5 12:36:49 BST 2020


Package: node-bluebird
Severity: important
Control: block 958403 by -1

node-cross-spawn reimplement builtin Node.js functions
child_process.sync and child_process.spawnSync compatible with
Windows.

This package has also some security holes. Please patch code to
replace `cross-spawn.spawn` by `child_process.sync` 



More information about the Pkg-javascript-devel mailing list