search

Munter / subfont

Command line tool to optimize your webfont loading. Aggressive subsetting based on your font use, self-hosting of Google fonts and preloading
MIT License
1.56k stars 29 forks source link

Upgrade AssetGraph to avoid vulnerability notice #152

Closed thewilkybarkid closed 2 years ago

thewilkybarkid commented 2 years ago

NPM is reporting https://npmjs.com/advisories/1753 as a result of subfont > assetgraph > sw-precache > meow > trim-newlines.

It seems that sw-precache was removed from AssetGraph a long time ago (https://github.com/assetgraph/assetgraph/commit/6b739f1b38c91dbeffa207c27886a9a2c226320d), but appears not to have been included in AssetGraph 6.

Could AssetGraph be updated to v7?

papandreou commented 2 years ago

Sure, fixed in 6.3.0.