Skip to content

Remove abandoned fstream dependency#1418

Merged
confused-Techie merged 1 commit intopulsar-edit:masterfrom
asiloisad:fix-fstream-cve
Feb 15, 2026
Merged

Remove abandoned fstream dependency#1418
confused-Techie merged 1 commit intopulsar-edit:masterfrom
asiloisad:fix-fstream-cve

Conversation

@asiloisad
Copy link
Contributor

Package fstream is an abandoned npm package (last published 2019 & deprecated) that was only used in spec/workspace-spec.js to copy fixture directories during test setup. Node's built-in fs.cpSync does the same thing in one line.

Copy link
Member

@DeeDeeG DeeDeeG left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me, hope to land this after the currently in-progress 1.131 Regular release probably.

@confused-Techie
Copy link
Member

Thanks a ton for contributing! With DeeDeeG's approval, I'll go ahead and merge this one

@confused-Techie confused-Techie merged commit 1c940cd into pulsar-edit:master Feb 15, 2026
198 of 200 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

Comments