Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Please update vulnerable dependencies #74

Open
Sawtaytoes opened this issue Jun 11, 2019 · 0 comments
Open

Please update vulnerable dependencies #74

Sawtaytoes opened this issue Jun 11, 2019 · 0 comments

Comments

@Sawtaytoes
Copy link

I went ahead and ran npm install and it found quite a few vulnerable packages:

found 450 vulnerabilities (239 low, 206 moderate, 4 high, 1 critical)

Running npm audit fix didn't get them all. I had to run npm audit fix --force to fix them all. It said some dependencies had breaking changes, but everything's working for me so maybe it's looking at the version number changes. Either way, GitHub also has a service where it will automatically pull-request changes to vulnerable packages.

I would love it if this library could be updated with these changes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant