search

andrewrk / node-mv

Like `fs.rename`, but works across devices, and works with directories. Think of the unix utility `mv`.
MIT License
156 stars 20 forks source link

Upgrade rimraf to latest version #34

Open ak-seek opened 9 months ago

ak-seek commented 9 months ago

We have a reported security vuln: https://security.snyk.io/vuln/SNYK-JS-INFLIGHT-6095116

Dependency tree looks like this: bunyan@1.8.15 › mv@2.1.1 › rimraf@2.4.5 › glob@6.0.4 › inflight@1.0.6

The current solution is to upgrade glob to beyond v8..

rimraf seems to already be on V10 .

I was wondering if we can update rimraf to the latest version here? It will be greatly appreciated :)

jmartens commented 2 weeks ago

We are suffering the same albeit by using renovatebot but also following the same dependency path:

Dependency tree looks like this: bunyan@1.8.15 › mv@2.1.1 › rimraf@2.4.5 › glob@6.0.4 › inflight@1.0.6

@andrewrk Any change this can be addressed?