Security Issue: Removing dependency `event-stream`

miickel / gulp-angular-templatecache

Concatenates and registers AngularJS templates in the $templateCache.

MIT License

524 stars 103 forks source link

Closed TheSeg closed 5 years ago

TheSeg commented 5 years ago

As noted in this issue, event-stream is compromised and the original maintainer doesn't have control over the repo.

I highly recommend removing event-stream, along with gulp-footer dependency (as mentioned in #150) which also contains `event-stream.

simonua commented 5 years ago

Thanks for opening this. Would you be willing to create a PR, please?

simonua commented 5 years ago

This is fixed now with v2.2.6.