NPM Audit Issues - Githubissues

chrisrzhou / react-wordcloud

☁️ Simple React + D3 wordcloud component with powerful features.

https://react-wordcloud.netlify.app

MIT License

211 stars 138 forks source link

NPM Audit Issues #100

Open rhalaly opened 2 years ago

rhalaly commented 2 years ago

There are npm audit issues in this package related to d3-color:

The d3-color module provides representations for various color spaces in the browser. Versions prior to 3.1.0 are vulnerable to a Regular expression Denial of Service. This issue has been patched in version 3.1.0. There are no known workarounds.

fresheneesz commented 1 year ago

To solve this issue, three dependencies need to be updated:

d3-scale needs to be updated to v4+,
d3-scale-chromatic and d3-transition need to be updated to v3+.

aschonfeld commented 1 year ago

It doesn't appear that this package is maintained anymore. It's a great package. I'm not sure whether I want to fork it with @fresheneesz updates or if anyone knows of a good alternative package?

p-pych commented 1 year ago

If someone else stumble upon issues with outdated d3 dependencies. Please feel free to use https://www.npmjs.com/package/react-wordcloud-d3-update-fork