Hi. I was going to post an issue on github and sti...
# pact-js
j
Hi. I was going to post an issue on github and still might, but I'm not entirely sure how to respond to the version of Consumer Pact library or Provider Pact library or how to respond with a reproducible example, so I thought I'd start here We have a tool called FOSSA, implemented by our security team, which our repos are dependent on and cannot merge in CI without a pass. In FOSSA, I have the error that
Copy code
This license is denied by your licensing policy.
This issue exists in a transitive dependency.
for version ramda (0.28.0) When i run
yarn why ramda
I get:
Copy code
├─ @pact-foundation/pact@npm:12.5.0
│  └─ ramda@npm:0.28.0 (via npm:^0.28.0)
│
I saw that recently ramda v 27 had had security vulnerabilities and this was removed from pact-js's package.lock: https://github.com/pact-foundation/pact-js/issues/962. I do NOT see anything about v28 Should I create an issue for v28 or is there something I need to do personally? I have already tried upgrading using yarn latest ( I was previously on 12.1 when the error happened), and I've even tried downgrading to a pre-v12 version of pact-foundation/pact. It does not seem to matter what version of pact I am on, I still get the failure.
1