ishanvyas22 / asset-mix

Provides helpers functions for CakePHP to use Laravel Mix.
MIT License
32 stars 12 forks source link

node packages vulnerabilities #28

Closed kanava-ali closed 3 years ago

kanava-ali commented 3 years ago

Existing node package dependencies require updatating due to found vulnerabilites when running npm install.

ishanvyas22 commented 3 years ago

Thanks @kanava-ali for opening up an issue. Will you be able to submit a PR to solve this?

kanava-ali commented 3 years ago

I will do it next week as I am starting my weekend. Cheers for quick response.

On Fri, Jul 9, 2021, 2:02 PM Ishan Vyas @.***> wrote:

Thanks @kanava-ali https://github.com/kanava-ali for opening up an issue. Will you be able to submit a PR to solve this?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/ishanvyas22/asset-mix/issues/28#issuecomment-877102433, or unsubscribe https://github.com/notifications/unsubscribe-auth/AUHXIZRF6J72CDD6XW6DDO3TW3JNFANCNFSM5ACNVWAA .

kanava-ali commented 3 years ago

I managed to solve this issue by running a "npm audit fix --force" command and updating the dependencies however the asse-mix command which generates the dependencies are quite new to me therefore I will not make any pull request to fix it.