mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-08-09 15:20:48 +00:00
undici 6.28.0, brace-expansion 5.0.9, and electron 41.10.4 in the root workspace, the desktop app, and the TUI. postcss and undici in website/. dompurify 3.4.12, mermaid 11.6.0, nanoid 3.3.17 in the desktop app. npm audit also reported js-yaml 4.3.0 (GHSA-5p4m-2wfm-xmqj, quadratic CPU in !!omap): through electron-builder in the root and desktop workspaces, and through docusaurus in website/. An override in each workspace moves it to 4.3.1. tar pinned to 7.5.22 (superficially seems compatible with 6!) and image-size pinned to an inhouse-fork of the real repo (lol) Each .npmrc gets the matching exclusion, so a transitive copy cannot pull an old version back in.