search

db-migrate / node-db-migrate

Database migration framework for node
Other
2.32k stars 361 forks source link

fix(deps): remove unused semver package to prevent be detected as a vulnerability #822

Closed roggervalf closed 1 year ago

roggervalf commented 1 year ago

ref https://github.com/db-migrate/node-db-migrate/issues/821, semver is not used anymore, so we should be save to remove it

roggervalf commented 1 year ago

please @wzrdtales when you get some chance

wzrdtales commented 1 year ago

This is a low level vulnerability so not really priority. Otherwise we fix those ourselves, as db-migrate is in production in all our projects and products.

Semver is not used right now, so see no reason to keep it at least right now.