search

JuliaPluto / PlutoDesktop

Pluto.jl bundled into an easy-to-install desktop app — currently under development
MIT License
44 stars 1 forks source link

Fix npm audits #52

Closed fonsp closed 8 months ago

fonsp commented 1 year ago

There are a couple of security vulnerabilities

(Having fewer dependencies would make these less likely 🌝)

fonsp commented 1 year ago

See https://github.com/JuliaPluto/PlutoDesktop/security/dependabot for all alerts

fonsp commented 1 year ago

I fixed most, not sure how to solve the last one. If I run npm audit fix --force, it downgrades electron-builder which gives a new warning. Run npm audit fix --force a second time and you're back where we started.

ctrekker commented 8 months ago

Pretty sure all is well with this now - not sure what it was that fixed it but I removed a LOT of dependencies

fonsp commented 8 months ago

Yessss thanks!!