search

JakeSidSmith / react-reorder

Drag & drop, touch enabled, reorderable / sortable list, React component
https://jakesidsmith.github.io/react-reorder/
MIT License
218 stars 58 forks source link

Update PropTypes #110

Open uzer-ua opened 2 years ago

uzer-ua commented 2 years ago

Is this library still maintained?

You want to upgrade PropTypes in the dependencies list. At least make non-strict version (e.g. ^15.6.0) 15.6.0 have known vulnerabilities (prop-types - fb.js - ... - node-fetch) and automatic scanning tools like WhiteSource are failing.

Using 3.0.0.alpha7

JakeSidSmith commented 2 years ago

I haven't needed this library for years, so I've not contributed anything, and it appears most people just fork it and don't contribute.

Feel free to open a PR, but I can't promise I'll get it merged any time soon.

In the meantime you can use one of:

https://docs.npmjs.com/cli/v8/configuring-npm/package-json#overrides https://yarnpkg.com/configuration/manifest/#resolutions https://classic.yarnpkg.com/lang/en/docs/selective-version-resolutions/