You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
🤷♂️ Did this trigger a warning in a consuming package you have? The dependency only comes in for running this package's unit tests, so it'd interesting & unexpected if the vulnerable dependency was being transitively picked up in the consumer.
Dropping a go.mod into the folder might be sufficient to break the resolution for consumers, unless of course there's an explicit import of github.com/aws/aws-lambda-go/events/test.
May also consider deleting the package, as it doesn't provide value over direct use of testify in the _test.go files. However... I know I've seen an internal codebase of ours import from this package, so that'd be a breaking change for someone else's unit testing.
The text was updated successfully, but these errors were encountered:
ahh, must be because of the
gitHub.com/aws/aws-lambda-go/test
package being in the repohttps://github.com/aws/aws-lambda-go/blob/main/events/test/jsoncompare.go#L8
Originally posted by @bmoffatt in #446 (comment)
Dropping a
go.mod
into the folder might be sufficient to break the resolution for consumers, unless of course there's an explicit import ofgb.xjqchip.workers.dev/aws/aws-lambda-go/events/test
.May also consider deleting the package, as it doesn't provide value over direct use of testify in the
_test.go
files. However... I know I've seen an internal codebase of ours import from this package, so that'd be a breaking change for someone else's unit testing.The text was updated successfully, but these errors were encountered: