gpujs/gpu.js 2.19.2 on GitHub

Security maintenance release.

Changed

Dependabot alerts: 51 → 4. All critical (5) and high (28) severity alerts resolved via npm audit fix across the dev tooling, browser-sync 3.0.4, and dependency overrides: node-gyp ^11 under gl (brings patched tar/cacache/make-fetch-happen to the source-build path) and immutable ^4.3.9. Source builds through the overridden node-gyp verified on Linux arm64.
The 4 remaining low-severity alerts are in the elliptic chain under browserify's Node-crypto polyfill: no patched elliptic release exists yet, and gpu.js never bundles the crypto polyfill, so the vulnerable code is unreachable in this project.
No source changes; kernels behave identically to 2.19.1.

npm install gpu.js@2.19.2

<script src="https://unpkg.com/gpu.js@2.19.2/dist/gpu-browser.min.js"></script>