
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
@gitlab/noop
Advanced tools
This is a noop dependency to be able to prune parts of a dependency graph.
@gitlab/noopThe idea behind this package is to be able to prune subtrees of dependencies which you might not need.
Reasons for why you might want to do this:
glob package which ships a CLI
interface which has some ESM-dependencies. One can reduce the dependency
graph by quite a bitThe different package managers have different resolution features.
overrides
is the native npm feature to override the version of a package. You can target
sub-dependencies:
{
"overrides": {
"glob": {
"jackspeak": "npm:@gitlab/noop@1.0.0"
}
}
}
Use Selective dependency resolutions and add a resolutions field to the package.json. The resoltions field allows pretty accurate sub-selection of dependencies.
{
"resolutions": {
"glob/jackspeak": "npm:@gitlab/noop@1.0.0"
}
}
You can set the resolution manually with e.g.
yarn set resolution 'jackspeak@npm:^2.3.5' 'npm:@gitlab/noop@1.0.0'
which will only update yarn.lock. Alternatively, you can update the package.json as well, which is a little more verbose:
{
"resolutions": {
"jackspeak@npm:^2.3.5": "npm:@gitlab/noop@1.0.0"
}
}
pnpm.overrides is the canonical
way to define a resolution for pnpm:
NOTE: With
pnpm@9.12.0, you don't need this package. You can simply use-as an override!
For older versions you can use this example:
{
"pnpm": {
"overrides": {
"glob>jackspeak": "npm:@gitlab/noop@1.0.0"
}
}
}
Bun supports both npm style overrides and yarn@1 style resolutions.
{
"resolutions": {
"jackspeak": "npm:@gitlab/noop@1.0.0"
}
}
FAQs
This is a noop dependency to be able to prune parts of a dependency graph.
The npm package @gitlab/noop receives a total of 44,769 weekly downloads. As such, @gitlab/noop popularity was classified as popular.
We found that @gitlab/noop demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.