BRIKEV / express-jsdoc-swagger

Swagger OpenAPI 3.x generator
https://brikev.github.io/express-jsdoc-swagger-docs/#/
MIT License
218 stars 30 forks source link

Upgrade `glob` dependency to >= v10 #260

Open bqp-articulate opened 8 months ago

bqp-articulate commented 8 months ago

Is your feature request related to a problem? Please describe. My snyk scanning tool highlighted a vulnerability in older versions of glob (prior to v10). The vulnerability is in the inflight dependency, which is a defunct project and won't ever have a fix. Newer versions have dropped that dependency.

Describe the solution you'd like This library uses a version of glob that does not have the vulnerability

Describe alternatives you've considered I've worked around the problem with yarn resolutions, but that's only intended to be a stopgap. The good news is that the express-jsdoc-swagger seems to work!

Additional context N/A