search

ProjectEvergreen / greenwood-getting-started

Companion repository for Greenwood's Getting Started guide
https://getting-started.greenwoodjs.io
MIT License
3 stars 6 forks source link

Dependabot - Known Vulnerabilities #80

Closed jstockdi closed 12 months ago

jstockdi commented 1 year ago

remote: GitHub found 4 vulnerabilities on ProjectEvergreen/greenwood-getting-started's default branch (2 critical, 1 high, 1 moderate). To find out more, visit: remote: https://github.com/ProjectEvergreen/greenwood-getting-started/security/dependabot

thescientist13 commented 1 year ago

Looks like a couple of them are tracked in open dependabot PRs. I think if I start merging them again, it should start picking them up automatically.

I'm not sure how any of these manifest within _nodemodules per se but if the builds passing, probably ain't hurting anything.

After I merge #76 I'll circle back on these.

thescientist13 commented 12 months ago

Thanks, all caught up now!