search

oleksiyk / kafka

Apache Kafka 0.9 client for Node
MIT License
297 stars 85 forks source link

Lodash dependency is a security vulnerability #227

Closed rakeshramakrishnan closed 5 years ago

rakeshramakrishnan commented 6 years ago

Need to update lodash, because of security vulnerabilities: https://nodesecurity.io/advisories/577

rakeshramakrishnan commented 6 years ago

Have tried updating lodash locally, but some tests are failing even with the existing lodash version - is there anything else needed to be done apart from having a local kafka server and running npm run test?

oleksiyk commented 6 years ago

Need to update lodash, because of security vulnerabilities: https://nodesecurity.io/advisories/577

Thanks, lodash updated in version 3.2.10

Have tried updating lodash locally, but some tests are failing even with the existing lodash version

Which exactly tests?