i18next / i18next-parser

Parse your code to extract translation keys/values and manage your catalog files
MIT License
472 stars 192 forks source link

New high severity vulnerability from `inflight`, coming from `broccoli-plugin@4.0.7` #945

Open ahayes91 opened 8 months ago

ahayes91 commented 8 months ago

🐛 Bug Report

https://snyk.io/test/github/i18next/i18next-parser indicates a new high severity issue

Detailed paths Introduced through: i18next-parser@i18next/i18next-parser#ffff92e38e522814a02140b719b0e6b9fa38360f › broccoli-plugin@4.0.7 › rimraf@3.0.2 › glob@7.2.3 › inflight@1.0.6 Introduced through: i18next-parser@i18next/i18next-parser#ffff92e38e522814a02140b719b0e6b9fa38360f › broccoli-plugin@4.0.7 › quick-temp@0.1.8 › rimraf@2.7.1 › glob@7.2.3 › inflight@1.0.6

It doesn't look like broccoli-plugin has been updated or maintained for a long time, is there an alternative package that could be used instead? Potentially an override workaround like in https://github.com/i18next/i18next-parser/issues/684#issuecomment-1345436440 could be used for now in the meantime? Maybe on rimraf - not sure if that's possible without breaking changes though...

Thank you!

To Reproduce

⬆️ See the Snyk report

Expected behavior

No errors from Snyk 😁