search

DynamoDS / DynamoDictionary

Apache License 2.0
8 stars 15 forks source link

Security Fix #36

Closed QilongTang closed 4 years ago

QilongTang commented 4 years ago

This PR should fix at least two dependencies from the known list image image

mjkkirschner commented 4 years ago

LGTM

QilongTang commented 4 years ago

Thanks @mjkkirschner , I tested locally Dictionary works well after these changes. The other vulnerabilities may require us do much more changes which may break Dictionary.. The strange thing is they also do not appear in npm audit list.. I guess there might be a gap between whitesource and npm audit.. Also one of the fix here also need to be applied to librarie.js repo, I will make that PR soon.

QilongTang commented 4 years ago

Merging for now to refresh WS dashboard