@_linked/cli 1.21.1 → 1.21.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +25 -0
- package/package.json +1 -5
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,30 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 1.21.2
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- [#113](https://github.com/linked-fw/cli/pull/113) [`476689a`](https://github.com/linked-fw/cli/commit/476689a2cce89639389b19daea2a240d929eacfd) Thanks [@flyon](https://github.com/flyon)! - Drop four declared-but-unused dependencies: `child-process-promise`, `css-parse`, `postcss-comment` and `postcss-strip-inline-comments`.
|
|
8
|
+
|
|
9
|
+
None of them is referenced anywhere outside `package.json`. The only trace of
|
|
10
|
+
any is a commented-out `// import parseCSS from 'css-parse';` at the top of
|
|
11
|
+
`src/loaders/css-loader.mts`.
|
|
12
|
+
|
|
13
|
+
They are worth removing rather than leaving because this package is a runtime
|
|
14
|
+
dependency of `@_linked/server`, not just a build tool: `lib/esm/cli.js`
|
|
15
|
+
statically imports `cli-methods.js`, so the whole dependency graph is loaded in
|
|
16
|
+
the serving process. Carrying advisories for code nothing calls is pure cost to
|
|
17
|
+
every consumer.
|
|
18
|
+
|
|
19
|
+
Together they account for 7 advisories — `cross-spawn` (ReDoS) via
|
|
20
|
+
`child-process-promise`, six `postcss` 5/6 advisories via the two postcss
|
|
21
|
+
wrappers, and `decode-uri-component` via `css-parse` → `css` →
|
|
22
|
+
`source-map-resolve`. None of the removed packages is the _current_ postcss:
|
|
23
|
+
the real one is 8.5.28 and is unaffected.
|
|
24
|
+
|
|
25
|
+
Typecheck clean, `test:unit` 303/303, build clean, and the audit total drops
|
|
26
|
+
from 27 to 20 in this repo.
|
|
27
|
+
|
|
3
28
|
## 1.21.1
|
|
4
29
|
|
|
5
30
|
### Patch Changes
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@_linked/cli",
|
|
3
|
-
"version": "1.21.
|
|
3
|
+
"version": "1.21.2",
|
|
4
4
|
"packageManager": "npm@11.19.1",
|
|
5
5
|
"description": "Command line tools for the @_linked/* packages and apps",
|
|
6
6
|
"main": "lib/esm/index.js",
|
|
@@ -96,7 +96,6 @@
|
|
|
96
96
|
"@vitejs/plugin-react": "^4.3.0",
|
|
97
97
|
"babel-loader": "^9.1.3",
|
|
98
98
|
"chalk": "^4.1.2",
|
|
99
|
-
"child-process-promise": "^2.2.1",
|
|
100
99
|
"chokidar": "^4.0.0",
|
|
101
100
|
"colors": "^1.4.0",
|
|
102
101
|
"commander": "^11.0.0",
|
|
@@ -104,7 +103,6 @@
|
|
|
104
103
|
"copyfiles": "^2.4.1",
|
|
105
104
|
"create-esm-loader": "^0.2.5",
|
|
106
105
|
"css-loader": "^6.10.0",
|
|
107
|
-
"css-parse": "^2.0.0",
|
|
108
106
|
"cssnano": "^7.0.7",
|
|
109
107
|
"depcheck": "^1.4.7",
|
|
110
108
|
"env-cmd": "^10.1.0",
|
|
@@ -119,7 +117,6 @@
|
|
|
119
117
|
"open": "^8.4.0",
|
|
120
118
|
"ora": "^8.0.1",
|
|
121
119
|
"postcss": "^8.5.3",
|
|
122
|
-
"postcss-comment": "^2.0.0",
|
|
123
120
|
"postcss-font-magician": "^4.0.0",
|
|
124
121
|
"postcss-import": "^16.1.0",
|
|
125
122
|
"postcss-loader": "^8.1.1",
|
|
@@ -127,7 +124,6 @@
|
|
|
127
124
|
"postcss-nested": "^7.0.2",
|
|
128
125
|
"postcss-preset-env": "^10.1.5",
|
|
129
126
|
"postcss-reporter": "^7.1.0",
|
|
130
|
-
"postcss-strip-inline-comments": "^0.1.5",
|
|
131
127
|
"postcss-url": "^10.1.3",
|
|
132
128
|
"react-refresh": "^0.18.0",
|
|
133
129
|
"react-refresh-typescript": "^2.0.10",
|