Commit
cf5efe6
braces sees ~600M downloads/month and is deeply embedded in the Node.js ecosystem. The disputed DoS CVE is causing audit alerts and CI/CD blockers across downstream projects, while the maintainer considers it bogus and refuses patches. Even if severity is debatable, refusing a…