search

oddjobsman / gulp-sloc

A port of the grunt-sloc plugin for gulp
MIT License
14 stars 6 forks source link

Update event-stream dependency. Compromised version #7

Open cluetjen opened 5 years ago

cluetjen commented 5 years ago

https://medium.com/intrinsic/compromised-npm-package-event-stream-d47d08605502

Current version resolves dependeny for event-stream to 3.3.6 which seems to be compromised. See linked article. Afaik an update to 4.0.0 should solve this.