Update vulnerable lodash version

brianc / node-sql

SQL generation for node.js

MIT License

1.05k stars 191 forks source link

Update vulnerable lodash version #394

Open spion-h4 opened 6 years ago

spion-h4 commented 6 years ago

This is triggering security failures when using nodesecurity/nsp and will soon also fail in npm due to built-in nsp support.

Pinging @brianc - seems like this one might be a little urgent (its certainly failing any CI checks that use nsp)

spion commented 4 years ago

pinging @danrzeppa

danrzeppa commented 4 years ago

@spion Why are there failing checks? It appears it is very old versions of node that are having issues. Is this something we don't really care about anymore?

spion-h4 commented 4 years ago

I agree, I don't see any reason to support node 0.x