asciidoctor / asciidoctor-vscode

AsciiDoc support for Visual Studio Code using Asciidoctor
Other
321 stars 97 forks source link

`npm install` reports 9 vulnerabilities on `master` #858

Closed ViToni closed 3 months ago

ViToni commented 3 months ago

Please provide details about:

added 972 packages, and audited 973 packages in 2m

153 packages are looking for funding run npm fund for details

9 vulnerabilities (1 low, 8 high)

To address issues that do not require attention, run: npm audit fix

To address all issues (including breaking changes), run: npm audit fix --force

Run npm audit for details.


* What you expected to happen: dependecies should be, if not uptodate, at least "clean"

Happend on `master`: 2235846a3708171e01a3076e354292c6a6d835e1
ViToni commented 3 months ago

It seems most of the outdated packages reported are transitive dependecies of gulp which hasn't seen updates in years and gulp is only used at build time to copy things around. There is only one dependecy which can be updated: mathjax