Hello 👋,
First, thanks for maintaining this project 🙏.
I noticed that this library depends on tmp in a version lower than 0.2.4. That version has a known vulnerability:
Steps to reproduce
- Install this library.
- Run
npm audit / pnpm audit / yarn audit.
- Observe the warning about the vulnerable
tmp dependency.
Suggested fix
Bump the tmp dependency to at least 0.2.4 to ensure downstream users are not exposed to this vulnerability.
Thanks again for your work on this project 🙌.