Closed Serubin closed 4 years ago
Jquery was pulled in by linkify - I updated linkify which is now no-zero dependency.
Github scanning seems to use the package-lock which yarn doesn't update. So I can only imagine how out of date that file was.
We definitely don't have as many vulnerabilities as github suggests. I've been running security and license scans with FOSSA - we're in good shape.
Remove unused package-lock file. Update dependencies to remove warnings, vulnerabilities, and jquery.