-
Notifications
You must be signed in to change notification settings - Fork 120
Description
Issue description
ts-node-dev depends on rimraf v2, which in turn depends on glob 7.1.5, which itself depends on unmaintained vulnerable package inflight
Context
Inflight last release was 7 years ago and there lots of vulnerabilities, latest glob v10 no longer depends on it, please update rimraf to latest version or remove it completed as dependency
https://security.snyk.io/package/npm/inflight
OS version (is it docker or host?), ts-node-dev version
ArchLinux 6.6.9-arch1-1 ts-node-dev 2.0.0
Did you try to run with ts-node?
Yes, but I need ts-node-dev to be working for development
Did you try to run with --files option enabled?
No, not required
Did you try to run with --debug option enabled?
No. not required
Do you have a repro example (git repo) with simple steps to reproduce your problem?
Getting error from this line, when trying to override rimraf to be latest version for ts-node-dev
Line 138 in 32bdc92
| rimraf.sync(getCompiledDir()) |