kimxogus / react-native-version-check

A version checker for react-native applications
MIT License
722 stars 177 forks source link

Address lodash security issue in lodash.pick #220

Open bcgilliom opened 8 months ago

bcgilliom commented 8 months ago

Use full lodash library, update imports

This should address the lodash.pick security issue (which seems to actually be unused?) and also switch to the recommended way to import lodash libraries (piecemeal imports are deprecated: https://lodash.com/per-method-packages). If I understand this should not increase the size of the bundle.

mohammed-io commented 6 months ago

Can anyone review this please? @kimxogus

hoh-yue commented 2 months ago

Can anyone please merge the request? @kimxogus @arochedy