Skip to content

Reduce dependencies from qs #25

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
benmccann wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Reduce dependencies from qs #25

benmccann wants to merge 1 commit into from

Conversation

@benmccann
Copy link

@benmccann benmccann commented May 31, 2025 •
edited
Loading

https://npmgraph.js.org/?q=qs - 18 dependencies
https://npmgraph.js.org/?q=neoqs - 0 dependencies

Used the legacy entrypoint for CJS support

@CLAassistant
Copy link

CLAassistant commented May 31, 2025 •
edited
Loading

CLA assistant check
All committers have signed the CLA.

@dt-eric-lefevreardant
Copy link

dt-eric-lefevreardant commented Dec 30, 2025

snyk test on my project reports vulnerabilities in qs@6.14.0:

Issues with no direct upgrade or patch:
  ✗ Allocation of Resources Without Limits or Throttling [High Severity][https://security.snyk.io/vuln/SNYK-JS-QS-14724253] in qs@6.14.0
    introduced by @dropbox/sign@1.10.0 > qs@6.14.0 and 1 other path(s)
  This issue was fixed in versions: 6.14.1

Sounds like this PR could fix this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@benmccann @CLAassistant @dt-eric-lefevreardant