search

kevva / download

Download and extract files
MIT License
1.28k stars 200 forks source link

upgrade got to v11.8.2 #212

Open FeelyChau opened 3 years ago

jakebrown58 commented 3 years ago

Any update on this? got 8.3.1 is failing the security audit now, and should be updated.

jimmywarting commented 3 years ago

Make a switch for using node-fetch instead? :)

domdinnes commented 2 years ago

@kevva - you'll want to merge this or a similar fix. Library maintainers will be reluctant to rely on download as a dependency while it itself depends on a vulnerable version of got.

Edit: Have seen https://github.com/kevva/download/pull/220 - this looks like a good candidate to resolve the issue.