fix: pin colors@1.4.0 to fix security vuln

itgalaxy / favicons

Favicons generator for Node.js

MIT License

1.19k stars 164 forks source link

Closed mannyluvstacos closed 2 years ago

mannyluvstacos commented 2 years ago

A Security Vuln was identified in the Colors package for >1.4.0, offending packages being 1.4.1, 1.4.44-liberty

This PR pins the color package to 1.4.0 as advised on the snyk page

alexander-akait commented 2 years ago

/cc @andy128k Can you look at this (currently I busy :disappointed: )