discordjs / RPC

A simple RPC client for Discord
MIT License
459 stars 190 forks source link

Vulnerability issue with ws #138

Closed cocoliliace closed 3 years ago

cocoliliace commented 3 years ago

Hi I'm new to open source so sorry if this is idiodic, but I've been getting security alerts from github's dependabot saying that there is a vulnerbility issue with ws with version <= 7.4.6. I'm wondering if we should upgrade the version of ws in package.json. I made a pull request that fixes this: #139

For more information, this is what the full security alert says: image

Thanks!

devsnek commented 3 years ago

This package does not operate a websocket server and is therefore unaffected.