Dependency known to be vulnerable

jsdoc2md / dmd

The default output template for jsdoc2md

MIT License

39 stars 49 forks source link

Dependency known to be vulnerable #48

Closed faust64 closed 7 years ago

faust64 commented 7 years ago

Among others, dmd includes a version of handlebars that is known to be vulnerable (see https://snyk.io/test/npm/dmd). Updating to last version available

75lb commented 7 years ago

vulnerable how?

This PR breaks dmd (Handlebars v4 introduced breaking changes). See this PR for more info about what work needs doing, cheers.

75lb commented 6 years ago

handlebars upgraded in the latest release of dmd (v3.0.7).