npm audit vulnerabilities found in v1.1.1 - Githubissues

jtblin / angular-chart.js

Reactive, responsive, beautiful charts for AngularJS using Chart.js: http://jtblin.github.io/angular-chart.js

Other

2.67k stars 761 forks source link

npm audit vulnerabilities found in v1.1.1 #701

Open softengi opened 5 years ago

softengi commented 5 years ago

Overview

Describe the issue. What is the issue and what did you expect? npm audit reports 45 vulnerabilities (10 low, 16 moderate, 17 high, 2 critical)

Please make sure to review and check all of these items:

[ x] Use latest version of the library
[ x] Make sure you've included all the dependencies e.g Chart.js, angular, etc.
[ x] Include a repro case, see below.

Step to reproduce

run "npm install" on your package run "npm install package-lock-only" run "npm audit"

Ensure you add a link to a plunker, jsbin, or equivalent. Issues without repro steps may be closed immediately.

Here is a jsbin template for convenience.

adrogon commented 5 years ago

What does npm audit print? Are you sure it is related to this dependency? We have 0 here. I would understand a few, but that many might indicate it is not just angular-chart.js related.