security issue

[OleksiiKachan]

current published version 3.0.0 has security issue

react-simple-maps@3.0.0 requires d3-color@1 - 2 via a transitive dependency on d3-interpolate@2.0.1
react-simple-maps@3.0.0 requires d3-color@1 - 2 via a transitive dependency on d3-transition@2.0.0

The earliest fixed version is 3.1.0. lock file has 2.0.1

react-simple-maps/package-lock.json

Lines 2550 to 2551 in 32e2f9f

	"node_modules/d3-interpolate": {
	"version": "2.0.1",

package.json in main branch already has updated version. please publish new version with updated dependencies

[carmenkolohe]

Checking in to see if this is actively being looked into, could someone please provide a status on this? @zimrick

[OleksiiKachan]

any updates on this?

[kholiavko-roman]

We fixed this by overriding dependencies d3- for react simple maps.

Add this to package.json

"overrides": {
    "react-simple-maps": {
      "d3-geo": "^3.1.0",
      "d3-selection": "^3.0.0",
      "d3-zoom": "^3.0.0"
    }
  }

[OleksiiKachan]

is this repo dead?