Open dev6james opened 4 years ago
As the test folder is still included in the package (until https://github.com/jsmreese/moment-duration-format/pull/136 is merged), a vulnerable version of moment js (2.19.1) is being shipped to consumers.
This PR updates the moment version used in test to include a security patch.
closes #137
@jsmreese I noticed no commits on this repo since June. Would you consider transferring ownership if you're no longer active on it?
As the test folder is still included in the package (until https://github.com/jsmreese/moment-duration-format/pull/136 is merged), a vulnerable version of moment js (2.19.1) is being shipped to consumers.
This PR updates the moment version used in test to include a security patch.
closes #137