react-dropzone / react-dropzone / 38023456598

96%

push

github

chore(deps): override toml to ^5 to clear its advisories

remark-mdx-frontmatter 5.2.0 pins the unmaintained toml ^3, which carries
the uncontrolled-recursion and prototype-pollution advisories (fixed in
toml 5). Override to ^5 (same package, maintained successor); this also
clears the "depends on vulnerable toml" alerts cascading through
remark-mdx-frontmatter and vocs. The docs use YAML frontmatter, so the
toml parser is never exercised. Keeps vocs at 2.9.0 (waku pin, #1531).

Assisted-by: Claude:claude-opus-4-8

364 of 383 branches covered (95.04%)

Branch coverage included in aggregate %.

438 of 449 relevant lines covered (97.55%)

141.67 hits per line