search

kevva / lpad-align

Left pad a string to align with the longest string in an array
MIT License
8 stars 4 forks source link

lpad-align breaks npm audit #5

Open MulMic opened 3 years ago

MulMic commented 3 years ago

On my last npm upgrade I ended up with 2 vulnerabilities, that won't fix, no matter what.

As it turns out lpad-align insists on pulling in meow@3.7.0

please update, thx

karlhorky commented 3 years ago

More information here: https://github.com/kevva/squeak/issues/4

carpogoryanin commented 3 years ago

meow fixed it in v10.1.1: https://github.com/sindresorhus/meow/commit/a0daf207695c5caa438f39168308ca71984f6b8c Please update meow in package.json at least this way: "meow": "^10.0.0" instead of current: "meow": "^9.0.0"

karlhorky commented 3 years ago

Seems like #9 updates to meow@10

Eskaan commented 3 years ago

Yeah, that's exactly what I've done. So my pr fixes 2/3 issues on this repo lol