Control: tags -1 + confirmed On Sun, 2019-12-22 at 14:14 +0100, Xavier Guimard wrote: > npm is vulnerable to some CVEs (CVE-2019-16775, CVE-2019-16776, > CVE-2019-16777). This patch groups patches from differents sub > modules affected and add a new module (npm-normalize-package-bin > package) used by these fixes. > Sorry for the delay. Please go ahead. Regards, Adam