search

AllenNeuralDynamics / aind-metadata-entry-js

Metadata entry using javascript
https://metadata-entry.allenneuraldynamics.org
MIT License
1 stars 1 forks source link

Resolve GitHub Dependabot vulnerability alerts #137

Closed helen-m-lin closed 4 months ago

helen-m-lin commented 6 months ago

Describe the bug There are currently 8 open Dependabot alerts open in this repository (1 high, 1 critical, 6 moderate).

To Reproduce Steps to reproduce the behavior:

  1. Go to https://github.com/AllenNeuralDynamics/aind-metadata-entry-js/security/dependabot
  2. Review open alerts.

Expected behavior We should resolve all alerts. Most involve package updates.

Screenshots If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

Additional context Running npm audit locally may help identify related vulnerabilities and fixes.

helen-m-lin commented 4 months ago

As of Apr 16, there are 12 open alerts. After PR #138 is merged, I'll check back and see what remains.