search

mxmul / closure-loader

Webpack loader for Google Closure modules ✨
MIT License
29 stars 22 forks source link

deep-extend 0.5.1 vulnerability #43

Closed Brian-Kaplan closed 6 years ago

Brian-Kaplan commented 6 years ago

The deep-extend version you ask for has a known vulnerability. Please update it to the latest.

See the discussion here for more details https://github.com/unclechu/node-deep-extend/issues/41#issuecomment-391090870

Thanks

rob-orr commented 6 years ago

I would also like to see this resolved.

mxmul commented 6 years ago

Thanks for reporting! I upgraded most of this library's dependencies, and npm audit is now coming up clean :)