search

mitre-attack / attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices
https://mitre-attack.github.io/attack-navigator
Apache License 2.0
2.01k stars 593 forks source link

fix: nav-app/package.json and Dockerfile to reduce vulnerabilities #640

Closed b34c0n5 closed 6 months ago

sonarcloud[bot] commented 6 months ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

clemiller commented 6 months ago

Hi @b34c0n5,

Thanks for your interest in improving the Navigator. Unfortunately, we cannot merge this PR at this time. The changes proposed include bumping Node.js to a version that our application currently does not support. Additionally, the upgrade to ngx-markdown v17 is not compatible with the version of Angular that Navigator uses (v14). We are in the process of upgrading to Angular v17, but do not have a timeline on when that will be completed/released. We are always open to improvements and upgrades, but they need to be compatible with our current setup. Thanks for your understanding.