fix: mitigate npm dependency advisories

2026-07-26 00:29:49 +08:00
parent 54617c927e
commit b461532075
11 changed files with 190 additions and 56 deletions
@@ -0,0 +1,6 @@
+# brace-expansion compatibility adapter
+
+Older `minimatch` releases call `require('brace-expansion')` as a function,
+while the security-fixed 5.x package exposes a named `expand` function.
+This adapter preserves the legacy callable CommonJS API and delegates all
+expansion work to the bounded `brace-expansion@5.0.8` implementation.