browserify / static-module

convert module usage to inline expressions
MIT License
74 stars 23 forks source link

npm audit moderate security issue #51

Closed dqmpope closed 5 years ago

dqmpope commented 5 years ago

npm audit highlights an issue with static-eval 2.0.1 - there's an advisory that requires an upgrade see https://www.npmjs.com/advisories/758

goto-bus-stop commented 5 years ago

npm audit fix should do the trick. This is only an issue if you pass untrusted code to static-module which is something nobody should ever do anyway.