launchdarkly / node-server-sdk

LaunchDarkly Server-side SDK for Node
Other
79 stars 65 forks source link

Failing nsp check: check nsp/npm audit before publishing to npm #108

Closed jagtesh closed 6 years ago

jagtesh commented 6 years ago

The current version (5.2.0) has a dependency (stringstream@0.0.5) that is currently failing an nsp check. See the below screenshot:

image

The resolution is to update it to stringstream@0.0.6. I will attach a PR for this shortly.

Thanks, Jag

jagtesh commented 6 years ago

Can you add nsp/npm audit to your build pipeline to check for vulnerabilities before publishing to npm?

eli-darkly commented 6 years ago

Fixed in the 5.2.1 release.