Open mhassan1 opened 2 years ago
update-notifier@5 has a transitive dependency on got@9, which has an open vulnerability that will not be backported. See https://snyk.io/test/npm/sassdoc/2.7.4#SNYK-JS-GOT-2932019.
update-notifier@5
got@9
One potential solution: replace update-notifier with simple-update-notifier (nodemon has done that: https://github.com/remy/nodemon/pull/2033).
update-notifier
simple-update-notifier
nodemon
update-notifier@5
has a transitive dependency ongot@9
, which has an open vulnerability that will not be backported. See https://snyk.io/test/npm/sassdoc/2.7.4#SNYK-JS-GOT-2932019.One potential solution: replace
update-notifier
withsimple-update-notifier
(nodemon
has done that: https://github.com/remy/nodemon/pull/2033).