search

Creatiwity / gatsby-plugin-favicon

UNMAINTAINED - Favicon Gatsby plugin
MIT License
166 stars 27 forks source link

Prototype Pollution #68

Closed broksonic21 closed 6 months ago

broksonic21 commented 4 years ago

Is there a dependency upgrade on the horizon? The npm audit steps listed don't resolve this...

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ minimist                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gatsby-plugin-favicon                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gatsby-plugin-favicon >                                      │
│               │ 56ef0faeb9f1ba08b7c8c4027042a9822590f7839bf47a296235c034a0a… │
│               │ > favicons > to-ico > resize-img > jimp > mkdirp > minimist  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/1179                            │
└───────────────┴──────────────────────────────────────────────────────────────┘
broksonic21 commented 6 months ago

I'm no longer actively needing this, so closing this out as it's 4+ years old and unresponded too