gettyimages / gettyimages-api_nodejs / 30370337885 / 3

98%

main: 98%

Pull #81

github

Bump brace-expansion from 1.1.11 to 1.1.16

Fixes GHSA-3jxr-9vmj-r5cp (CVE-2026-13149), a DoS via exponential-time
expansion of consecutive non-expanding {} groups in brace-expansion,
pulled in transitively via eslint-plugin-import -> minimatch.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

94 of 115 branches covered (81.74%)

1025 of 1045 relevant lines covered (98.09%)

37.98 hits per line