microsoft / microsoft/setup-msbuild
Unneeded dependency on @actions/tool-cache
Open
@timheuer is already working on this.
Since Nov 19, 2024.
dependencies
- Dominant language
- TypeScript
- Stars
- 398
- Forks
- 93
- Avg merge
- 21d 14h
- Merged PRs (30d)
- 1
Description
Looks like this code once directly depended on @actions/tool-cache but no longer does.
This dependency could be removed from package.json which clears this transitive semver vulnerability CVE-2022-25883
"@actions/tool-cache": "^1.3.0"
~/src/setup-msbuild/src$ git grep tool-cache $(git rev-list --all)
3ef0817a4abf99a3632a7c77a60e982a156db578:main.ts:import * as toolCache from '@actions/tool-cache'
5817abf347fd91d634f86da6635e14e39a3b1b66:main.ts:import * as toolCache from '@actions/tool-cache'
dd9521cc411535ba013905b144116257817da37b:main.ts:import * as toolCache from '@actions/tool-cache'
5a941602d277d18f27537d169fc01b7696c3e095:main.ts:import * as toolCache from '@actions/tool-cache'
6a7105d96d081fdf3bdb20ec966186aa56cd9a82:main.ts:import * as toolCache from '@actions/tool-cache'
5639ea3d911c64ff68d708ddd6aa66c905716e67:main.ts:import * as toolCache from '@actions/tool-cache'
ded5a39da68208ac982f80008c4e9f72f77229f7:main.ts:import * as toolCache from '@actions/tool-cache'
~/src/setup-msbuild/src$ grep tool-cache main.ts
~/src/setup-msbuild/src$
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.