ericcornelissen / svgo-action

Automatically run SVGO with GitHub Actions
MIT License
30 stars 5 forks source link

Resolve dependency on vulnerable package `ip` #935

Closed ericcornelissen closed 8 months ago

ericcornelissen commented 8 months ago

Checklist

Description

Use npm audit fix to bump the dependency socks in order to transitively replace the dependency ip with another dependency to resolve a known vulnerability in ip.

Since ip is used as a devDependency only this is not considered a security problem and no new release will be created for this.