package.json dependency on "pure-gist-embed" involves a security vulnerability

manuelgeek / vuejs-medium-editor

A medium like text editor for vue js WYSIWYG

https://manuelgeek.github.io/vuejs-medium-editor/

MIT License

135 stars 37 forks source link

package.json dependency on "pure-gist-embed" involves a security vulnerability #88

Open igal1c0de4n opened 5 months ago

igal1c0de4n commented 5 months ago

Apparently tui2tone/gist-embed (aka pure-gist-embed) hasn't been updated for several years now. It pulls axios with a known security vulnerability:

Maybe it's time to replace it (?)

manuelgeek commented 1 month ago

do you have an alternative in mind? @igal1c0de4n

igal1c0de4n commented 1 month ago

sorry - I don't have sufficient experience with the desired functionality nor with packages which may replace it