Description
The package currently depends on [email protected], which is deprecated and has known security vulnerabilities.
Current Behavior
When installing codebuff, users see this warning:
npm warn deprecated [email protected]: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version.
Suggested Fix
Update the tar dependency to ^7.0.0 or later in package.json.
Environment
- codebuff version: 1.0.589
- Node.js version: v22.16.0
- npm version: 11.5.2