I found a few deprecated dependencies on the project, and trying to fix them I fell on jasmine-node project. It uses a outdated gaze version wich, in turn, uses a outdated minimatch version that may cause a RegExp DoS issue.
I created the pull request mhevery/jasmine-node#418 but don't know if it will be accepted because the project isn't updated for almost three years. Talking to my teammate, he gave me the idea to change the test runner to an alive library. What do you think?
Hi guys!
I found a few deprecated dependencies on the project, and trying to fix them I fell on jasmine-node project. It uses a outdated
gaze
version wich, in turn, uses a outdatedminimatch
version that may cause a RegExp DoS issue.I created the pull request mhevery/jasmine-node#418 but don't know if it will be accepted because the project isn't updated for almost three years. Talking to my teammate, he gave me the idea to change the test runner to an alive library. What do you think?