Repository navigation
|
Hello all, aws-cdk depends on the bundled @aws-cdk/asset-node-proxy-agent-v6, however it's been several months since there has been no "human" activity in that repository. The only activity there is automation related, like dependabot. There are a lot of open PRs that address some CVEs on transitive dependencies, for example, which haven't been addressed for months. Since the repo also restricted issue creation, it's a bit hard to raise that over there. Is there something that aws-cdk could do about it or does one project have NOTHING to do with the other? |
Replies: 3 comments
|
Hello! Reopening this discussion to make it searchable. |
|
Closure: it seems like human-opened PRs are addressed, which was what happened yesterday. |
|
Hello! Reopening this discussion to make it searchable. |
Closure: it seems like human-opened PRs are addressed, which was what happened yesterday.