dineeek / ngx-libs-workspace / 24905742591

97%

push

github

fix(security): pin pnpm overrides to caret ranges to avoid cross-major bumps (#39)

PR #38 landed with ">=X" overrides that let pnpm resolve to the latest
satisfying version; minimatch jumped from 3.x to 10.x and broke
test-exclude@6 (used by Jest coverage) with
`TypeError: minimatch is not a function` — main's CI went red on merge.

Tighten every override to a caret range so we stay inside the same major
as the vulnerable version while still picking up the patched release.
Audit stays clean (0/0/0/0/0).

187 of 201 branches covered (93.03%)

Branch coverage included in aggregate %.

244 of 252 relevant lines covered (96.83%)

43.57 hits per line