Shipping with Parcel v2.x as default #1114
Unanswered
DaviDevMod
asked this question in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
TSDX examples are built with Parcel v1.12.3 by default. However this version of Parcel has many known vulnerabilities that have already been addressed.
It would be nice if TSDX could ship with Parcel's new major release.
A drawback for shipping with Parcel 2 would be losing the ability to update the example's built when changes occur in the src folder.
As stated here the issue is on their roadmap, but the solution is complex to implement.
In the meantime, instead of exposing their users to known vulnerabilities, TSDX could ship with Parcel v2.x and possibly provide users with a workaround to the problem.
I provided a stupid one in the open issue #1030, but it would be great from TSDX to ship with a better one by default.
The workaround could be a simple
"rebuild"
script, or maybe invalidating caches in the example folder anytimesrc
is modified, or whatever; anything would be better than leaving developers exposed to all those vulnerabilities or leaving them to find their own workaround in order to make safe and comfortable use of TSDX.With that said, I don't know if there are any other drawback to shipping with Parcel's new major release.
In any case I would like to thank anyone who contributed on building this awesome CLI I am enjoying, and I want to reassure you that I would not be upset if, for some reason, you decide to stick with Parcel v1.12.3.
Beta Was this translation helpful? Give feedback.
All reactions