stacklok / toolhive-studio / 30260422704

72%

push

github

fix(security): remediate brace-expansion, js-yaml, and tar (#2510)

Mirror the ToolHive Studio remediation from enterprise #2720: bump
patched transitive deps, keep brace-expansion 1.x/2.x for Electron
Forge/ESLint, and correct the claude-code-action version annotation
so Grype stops treating the existing pin as vulnerable v1.

Co-authored-by: Cursor <cursoragent@cursor.com>

5603 of 8295 branches covered (67.55%)

8302 of 11472 relevant lines covered (72.37%)

148.7 hits per line