scastillo-jp/braces-forkTemporary fork of braces with a minimal security patch for CVE-2026-93687, created only to validate dependency override behavior and Fortify/FoD detection before moving the fix to an official Bentobox-owned source.
Temporary security-patched fork of braces for Fortify/FoD validation.
This repository exists only to test whether consuming a remote fork removes the
[email protected] finding from software composition analysis. It is not intended to
be the long-term source of truth.
If the approach works, the fork should be moved to an official Bentobox-owned repository or package source.
This is not a custom redesign of the library. The fork is intended to carry a minimal security patch aligned with the upstream remediation proposed in micromatch/braces PR #72, until an official upstream release becomes available.
