Upgrade dependencies to fix vulnerabilities in devDependencies

codecentric / gopass-ui

gopass CLI + UI = visual cross-platform password manager for teams

MIT License

248 stars 19 forks source link

Closed jonas-pietzsch closed 5 years ago

jonas-pietzsch commented 5 years ago

found 10 vulnerabilities (9 moderate, 1 high)

jonas-pietzsch commented 5 years ago

Fixed the high severity vulnerability (webpack-dev-server) by migrating webpack to version 4, including some other connected dependencies

jonas-pietzsch commented 5 years ago

Result:

>> npm audit
                       === npm audit security report ===

found 0 vulnerabilities
 in 35468 scanned packages

🎉