latest spectrum-colorpicker 1.8.0 giving vulnerable version of jquery

bgrins / spectrum

The No Hassle JavaScript Colorpicker

https://bgrins.github.io/spectrum/

MIT License

2.32k stars 588 forks source link

latest spectrum-colorpicker 1.8.0 giving vulnerable version of jquery #555

Open Pankajmishra31dec opened 4 years ago

Pankajmishra31dec commented 4 years ago

Hello Team,

Can you help to upgrade spectrum-colorpicker so that it gives a compliant version of jquery as transitive dependency ? Currently spectrum-colorpicker 1.8.0 is giving jquery 2.1.0 as transitive dependency .

Pankaj