Skip to content

Update rimraf to latest v5 to fix vulnerability from inflight dependency of glob package #343

@cherviakovtaskworld

Description

@cherviakovtaskworld

Issue description

ts-node-dev depends on rimraf v2, which in turn depends on glob 7.1.5, which itself depends on unmaintained vulnerable package inflight

Context

Inflight last release was 7 years ago and there lots of vulnerabilities, latest glob v10 no longer depends on it, please update rimraf to latest version or remove it completed as dependency

https://security.snyk.io/package/npm/inflight

OS version (is it docker or host?), ts-node-dev version
ArchLinux 6.6.9-arch1-1 ts-node-dev 2.0.0

Did you try to run with ts-node?
Yes, but I need ts-node-dev to be working for development

Did you try to run with --files option enabled?
No, not required

Did you try to run with --debug option enabled?
No. not required

Do you have a repro example (git repo) with simple steps to reproduce your problem?
Getting error from this line, when trying to override rimraf to be latest version for ts-node-dev

rimraf.sync(getCompiledDir())

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions