Add test-files to .npmignore

Question

Add test-files to .npmignore

ingo opened this issue 8 years ago · 2 comments

Running retire.js chokes on jquery. Can we not publish those files to npm?

/Volumes/Shared/Projects/grunt-appc-js/node_modules/grunt-retire/test-files/bower.json
↳ jquery 1.4.2 has known vulnerabilities: severity: medium; CVE: CVE-2011-4969; http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4969 http://research.insecurelabs.org/jquery/test/ severity: medium; bug: 11290, summary: Selector interpreted as HTML; http://bugs.jquery.com/ticket/11290 http://research.insecurelabs.org/jquery/test/ severity: medium; issue: 2432, summary: 3rd party CORS request may execute; jquery/jquery#2432 http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/

Answer 1 · 2017-02-03T14:09:37.000Z

@ingo Good point, these are just test files used during development of grunt-retire :) I'll add a .npmignore so they are not included in the published version.

Answer 2 · 2017-02-03T14:27:30.000Z

@ingo Should now be fixed, published as version 1.0.7. Thanks for reporting the issue :)