search

esnet / react-timeseries-charts

Declarative and modular timeseries charting components for React
http://software.es.net/react-timeseries-charts
Other
856 stars 283 forks source link

Updated all dependencies to latest minor/patch versions #503

Open ericve25 opened 1 year ago

ericve25 commented 1 year ago

A critical security vulnerability in older versions of loader-utils is included in this project's current dependency tree. https://security.snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105 Updated all dependencies to latest minor/patch versions to mitigate this issue. Also removed devDependency dsv-loader as it pinned a very old, vulnerable version of loader-utils and didn't seem to actually be used anywhere in the dev scripts. Tested all example pages locally in the website, and all appear working after this update.

ericve25 commented 1 year ago

@sartaj10 @pjm17971 this is ready for review. Would you be able to take a look here to see if this is mergeable to resolve the security vulnerability?