search

MMF-FE / svgicon

SVG icon components and tool set
https://mmf-fe.github.io/svgicon
MIT License
922 stars 95 forks source link

yargs version update to resolve the prototype issue related to prev. … #159

Open shenoyguru opened 3 years ago

shenoyguru commented 3 years ago

…versions of y18n

the current version of yargs used a version of y18n that has Prototype Pollution issues https://www.npmjs.com/advisories/1654 As mentioned in the abive doco this has been resolved in 5.0.5 or later versions of y18n. yargs version 17.0.1 uses the v5.0.5 of y18n which should resolve this issue