search

gulp-community / gulp-livereload

gulp plugin for livereload
768 stars 67 forks source link

Switched to tiny-lr #110

Closed garrows closed 8 years ago

garrows commented 8 years ago

Switched to tiny-lr as mini-lr is deprecated and fails NSP checks.

$ nsp check
(+) 1 vulnerabilities found
┌───────────────┬────────────────────────────────────────────────────────────────────┐
│               │ Regular Expression Denial of Service                               │
├───────────────┼────────────────────────────────────────────────────────────────────┤
│ Name          │ ms                                                                 │
├───────────────┼────────────────────────────────────────────────────────────────────┤
│ Installed     │ 0.6.2                                                              │
├───────────────┼────────────────────────────────────────────────────────────────────┤
│ Vulnerable    │ <=0.7.0                                                            │
├───────────────┼────────────────────────────────────────────────────────────────────┤
│ Patched       │ >0.7.0                                                             │
├───────────────┼────────────────────────────────────────────────────────────────────┤
│ Path          │ gulp-livereload@3.8.1 > mini-lr@0.1.8 > debug@2.0.0 > ms@0.6.2     │
├───────────────┼────────────────────────────────────────────────────────────────────┤
│ More Info     │ https://nodesecurity.io/advisories/46                              │
└───────────────┴────────────────────────────────────────────────────────────────────┘
leo commented 8 years ago

Hey, @garrows! Just wanted to let you know that I've created a standalone fork of this repo, since it doesn't seem to be maintained anymore. You can find it here.

So I might be a good idea to re-open this PR there.

garrows commented 8 years ago

Giving up.