search

gulpjs / glob-stream

Readable streamx interface over anymatch.
MIT License
178 stars 53 forks source link

npm audit returns errors. #96

Closed GarthDB closed 6 years ago

GarthDB commented 6 years ago

npm audit returns high errors with dependencies:

full log at https://gist.github.com/GarthDB/73e3f62e9ee4ccde5d22144b4e4ae163

Updating minimatch will fix it, but https://www.npmjs.com/package/glob hasn't been updated. This error impacts everything using glob-stream including vinyl-fs and gulp itself.

GarthDB commented 6 years ago

This is an issue for Glob, but it doesn't quite seem as active as a project and it still impacts this package.

GarthDB commented 6 years ago

It looks like the latest version of glob (7.1.2) uses an updated minimatch (^3.0.4)

GarthDB commented 6 years ago

The pull request I filed seems to fix the minimatch error, but the dev dependencies need to be updated to fix more of the errors.

phated commented 6 years ago

Our ranges already pick up the right versions.

GarthDB commented 6 years ago

Thanks @phated