search

dmy / elm-doc-preview

Elm offline documentation previewer
https://www.npmjs.com/package/elm-doc-preview
Other
126 stars 15 forks source link

`npm audit` warns about vulnerabilites #28

Closed ChristophP closed 4 years ago

ChristophP commented 4 years ago

Hi,

I have elm-doc-preview in my package.json's devDependencies. It's really cool to use :-) However, since I added it, github and npm complain about vulnerabilities.

Would be nice if they could be fixed. Maybe running npm audit fix will be enough. If not it would require manual review.

rlefevre commented 4 years ago

It was fixed in master but not yet published. I have published 3.0.3 that should fix github complains. Please confirm.

Note that I only fixed critical vulnerabilities because I keep nodejs 6 compatibility for now and this requires using some dependencies with a lot of lower level vulnerabilities that would be harder to fix.

rlefevre commented 4 years ago

Published version 3.0.4 actually fixes all known vulnerabilities.

ChristophP commented 4 years ago

awesome thanks :-) I can confirm that all vulnerabilites are gone.

image