fix(deps): Add explicit dependency on safe-buffer

This removes an implicit transitive dependency that itself relies on node_modules being flattened by package managers. Without this explicit dependency, stricter package managers like pnpm fail to install a usable copy of this library. Refs npm/libnpmaccess#2 Fixes #3
npm · Sep 13, 2019 · 8eae5f0 · 8eae5f0
1 parent 5dbd1d7
commit 8eae5f0
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 13 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -34,7 +34,8 @@
     "figgy-pudding": "^3.4.1",
     "lru-cache": "^5.1.1",
     "make-fetch-happen": "^5.0.0",
-    "npm-package-arg": "^6.1.0"
+    "npm-package-arg": "^6.1.0",
+    "safe-buffer": "^5.2.0"
   },
   "devDependencies": {
     "cacache": "^12.0.0",