Commit activity
Last 12 weeks · 0 commits
Community health
4 of 6 standards met
85
✓README✓License✓Contributing✓Code of Conduct○Issue Template○PR Template
Recent fixes
Bump semver-regex version to apply ReDoS vulnerability fix
Subject of the issue find-versions@3.2.0 requires semver-regex@2.0.0, which has a security problem (see: SNYK-JS-SEMVERREGEX-1047770): I do not know if this vulnerability actually affects find-versions, but it will show up in security reports about dependencies. Since a large number of developers still use find-versions@3.2.\**(1,762,377 downloads per week), is there any posibility that you could release an update version for 3.2.\ (ie 3.2.1) that introduces a patched version(>=3.1.2) of semver-regex? In find-versions@3.2.1, maybe you can perform the following update: where semver-regex@3.1.2(>=3.1.2) has fixed the vulnerability SNYK-JS-SEMVERREGEX-1047770.
safari can't resolve ?<= ; throw error but you package use semver-regex
Structured data for AI agents
Repository: sindresorhus/find-versions. Description: Find semver versions in a string: `unicorn v1.2.3` → `1.2.3` Stars: 46, Forks: 7. Primary language: JavaScript. Languages: JavaScript (92.5%), TypeScript (7.5%). License: MIT. Latest release: v6.0.0 (2y ago). Open PRs: 0, open issues: 0. Last activity: 2y ago. Community health: 85%. Top contributors: sindresorhus, kevva, BendingBender, jimmywarting, watson.