search

Anidetrix / rollup-plugin-styles

🎨 Universal Rollup plugin for styles: PostCSS, Sass, Less, Stylus and more.
https://anidetrix.github.io/rollup-plugin-styles
MIT License
242 stars 43 forks source link

Vulnerabilities #196

Closed diego-antonelli closed 2 years ago

diego-antonelli commented 2 years ago

Hi, can those 2 vulnerable libraries be bumped? Both libraries are being used in some other dependencies and snyk complains a lot about.

https://snyk.io/advisor/npm-package/rollup-plugin-styles

diego-antonelli commented 2 years ago
diego-antonelli commented 2 years ago

Master apparently is already using v5 of cssnano, @Anidetrix can you bump the version and release a new package through npmjs?

Anidetrix commented 2 years ago

@diego-antonelli I'll be releasing the new version this, or maybe next week, have a few hardware issues at the moment.

diego-antonelli commented 2 years ago

Thats perfect. Thanks a lot!

diego-antonelli commented 2 years ago

@diego-antonelli I'll be releasing the new version this, or maybe next week, have a few hardware issues at the moment.

Any updates?

ghost91- commented 2 years ago

Any news by now?

diego-antonelli commented 2 years ago

@ghost91- I gave up of waiting and implemented postcss instead, which gave me the same defaults.

o-mega commented 2 years ago

@diego-antonelli can you show your implementation of postcss instead of this plugin?

diego-antonelli commented 2 years ago

@o-mega https://github.com/mendix/widgets-resources/pull/1078/commits/19fe675543ff8e5e1bfb6ceb6963e6e4d057ba6f

o-mega commented 2 years ago

@diego-antonelli thank you a lot! You made my day!

diego-antonelli commented 2 years ago

You're welcome @o-mega. I will close the issue as nobody is taking actions and I solved my problem.