Repository Issue Activity (beta)

#323 Package no longer installable on Node 18

#318 optimizationLevel 2 lets .. erase the Windows drive root and UNC share from patterns

#314 Vulnerability of brace-expansion in 3.1.5 v of minimatch

#302 Security issue in dependency [email protected]

#312 Security: update brace-expansion to 5.0.7

#313 Security Advisory GHSA-mh99-v99m-4gvg: ReDoS vulnerability in minimatch

#311 Node support policy

#310 Security issue in brace-expansion dependency for earlier versions of minimatch

#307 Staged Publishing — 654M weekly downloads behind one npm token

#298 GHSA-23c5-xmqv-rm74: claimed fixed versions 8.0.6 and 6.2.2 ship pre-fix compiled output (build pipeline not run)

#297 Engines in package.json

#296 Request: backport ReDoS fix to 3.x line (CVE-2026-27903, CVE-2026-27904, CVE-2026-26996)

#295 [v3] Update dependency to fix vulnerability

#274 a slash can break the extglob syntax

#219 Feature Request: Testing against multiple patterns

#226 Support GLOBSTARSHORT

#246 How to match exact start of string?

#273 Invalid regex generated when glob includes comma and character class

#291 Any plan to backport CVE-2026-26996 fix to 9.x for Node 18 users?

#290 National Vulnerability Database is not updated for CVE-2026-26996

#282 Possible regression in v9 with new versions

#286 versions >= 9.0.6 is a breaking change

#287 CVE-2026-26996 - Resolved for version 3.1.3, but vulnerable to 3.1.4 ?

#284 [3.1.4/4.2.5/5.1.8/6.2.2/7.4.8/8.0.6/9.0.7/10.2.3 regression] `minimatch("a", "a/**", { partial: true })` incorrectly returns `false`

#285 Matching change in v3.1.4