eugene1g / font-blast

Give me an icon-font, and I'll create individual SVG/PNG files for all icons in it
MIT License
337 stars 17 forks source link

Upgrade dependency svgo to latest version (v1.2.2) #12

Open mehta-ankit opened 5 years ago

mehta-ankit commented 5 years ago

js-yaml had a vulnerability and and it is a dependency for svgo package. The maintainers of svgo have updated the dependency to 3.13.1 (https://github.com/svg/svgo/releases/tag/v1.2.2). But font-blast has a specific version opf svgo as a dependency, it should be updated so the version without vulnerability is downloaded instead.

mattcrowder commented 5 years ago

+1!