search

mapbox / shp-write

create and write to shapefiles in pure javascript
BSD 3-Clause "New" or "Revised" License
290 stars 186 forks source link

jszip dependency security vulnerability #92

Closed rooby closed 10 months ago

rooby commented 1 year ago

The jszip dependency version has a vulnerability and should be updated. See https://github.com/advisories/GHSA-jg8v-48h5-wgxg

sheindel commented 10 months ago

Resolved as of tag v0.4.0, should be on npm soon.

sheindel commented 10 months ago

Good news: v0.4.2 is now available.

Less good news: Mapbox changed their deployment organization so this package is now hosted under a different package

@mapbox/shp-write https://unpkg.com/@mapbox/shp-write@latest/shpwrite.js

rooby commented 10 months ago

Thanks for your efforts on getting this new version out @sheindel Aside from the PR I opened about the types it seems to be working for my usage.