Skip to content

fix(deps): migrate node-semver crate to js-semver - #2835

Open
ryuapp wants to merge 1 commit into
voidzero-dev:mainfrom
ryuapp:fix/migrate-to-js-semver
Open

ryuapp wants to merge 1 commit into
voidzero-dev:mainfrom
ryuapp:fix/migrate-to-js-semver

Conversation

@ryuapp

@ryuapp ryuapp commented Sep 27, 2026

Copy link
Copy Markdown

Hello, as it seemed that fengmk2 might be interested, I have created this PR.

The existing node-semver crate has unnecessary dependencies, ranges and version parsing that are incompatible with npm's node-semver, and its maintenance has stalled.

Therefore, I have created a crate called js-semver, which is zero dependencies by default and compliant with node-semver. Its performance is also significantly improved compared to node-semver crate, so please consider using it.
https://github.com/ryuapp/js-semver

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedcargo/​js-semver@​1.0.010010093100100

View full report

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant