is_js dependency reported as vulnerable

bnb-chain / javascript-sdk

Javascript SDK to communicate with BNB Beacon Chain.

Apache License 2.0

383 stars 237 forks source link

is_js dependency reported as vulnerable #404

Closed APshenkin closed 5 months ago

APshenkin commented 9 months ago

https://github.com/advisories/GHSA-pvrw-g6fx-mcx2

As well this library is not supported at all. Maybe it's good idea to switch to something else or just copy several functions from it, as this sdk doesn't use a lot from it

robot-ux commented 5 months ago

fixed by #411