unstale

npm / tmp

tmp

What changed in tmp 0.2, from its official release notes, upgrade guides and advisories. Also covers @types/tmp. Sources checked 2026-10-27.

2 security

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.8 on npm

tmp 0.22 changes

Security 2

  • tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template

    0.2.7security advisory

  • tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape

    0.2.6security advisory