- 000
Description:
Imagine a package that is no longer maintained that has one dependency that is vulnerable to an exploit. boo1ean/realist#3 could be an example.
There you will see that realist depends on minimist 0.0.7 which is vulnerable to GHSA-xvch-5gv4-984h. The project don't have that auto merge fo...