search

FormidableLabs / inspectpack

An inspection tool for Webpack frontend JavaScript bundles.
MIT License
592 stars 20 forks source link

Vulnerability introduced through yargs v11 #118

Closed jamesbhobbs closed 5 years ago

jamesbhobbs commented 5 years ago

As best described here: https://app.snyk.io/test/npm/inspectpack/4.2.1

This package is using an npm dependency (yargs) that has a vulnerability. Could you please update the version of yargs you use to patch this?

PS It might be worth adding automatic vulnerability checking with Snyk.

ryan-roemer commented 5 years ago

Thanks for the report! Fix released in inspectpack@4.2.2

jamesbhobbs commented 5 years ago

@ryan-roemer great thanks