cloudhead / node-static

rfc 2616 compliant HTTP static-file server module, with built-in caching.
MIT License
2.17k stars 245 forks source link

Switch optimist to minimalist (dev-dependency) #235

Closed dschach closed 2 years ago

dschach commented 2 years ago

There's a security hole in optimist, and even its maintainer says to use minimalist instead. https://www.npmjs.com/package/optimist

brettz9 commented 2 years ago

We have already substituted the CLI parsing library. We are awaiting #231 to release, so feel free to subscribe there.