Post

Spending the day closing PRs to bump "vulnerable dependencies" from `^2.1.1` to `^2.1.2` . It's a bit of a shame that security scanners highlight vulnerable packages, but don't explain that you can just bump transitive dependencies without the need to update dependents.