Closed abose closed 2 years ago
Currently, our paclage.json files include dependencies of the format "^16.0.2" which pulls in the newest version. This can lead to vulnerabilities like this: https://fossbytes.com/developer-corrupts-faker-js-and-color-js/
"^16.0.2"
"@commitlint/cli": "16.0.2",
Verified fixed: https://github.com/aicore/template-nodejs/pull/18
Currently, our paclage.json files include dependencies of the format
"^16.0.2"
which pulls in the newest version. This can lead to vulnerabilities like this: https://fossbytes.com/developer-corrupts-faker-js-and-color-js/Fix:
"@commitlint/cli": "16.0.2",