How to investigate and address a GitHub security vulnerability with a "transitive dependency" (a sub-dependency of one of your dependencies) using Yarn.

In this video, we find that we need to upgrade a dependent (the package that depends on the vulnerable package) in order to address the vulnerability.

Part of the Yarn Security Fixes Guide:

[ Ссылка ]

What are the "gp" and "gca" commands that I type in the terminal?

These are the Git aliases that I use:

gp - git push
gca - git commit -a

свернуть