Open BSFishy opened 1 year ago
Here are the main things I've found so far:
Date
to Moment
utcOffset
was addedref
doesn't work out of the box for some reasonChanging these things would most likely require a major version bump, or a rework of how some of the date picker component works. For fixing CVE's, the work is too much. However, we still probably want to look into updating to the version from NPM in the future.
Elastic forked
react-datepicker
in order to add some accessibility improvements. It was forked on version 2.0.0, where the latest version is 4.8.0. As of now, lots of CVEs are coming from that package, so it may make sense to see if we can just switch to using it off NPM and upgrading to the latest version, rather than trying to fix the CVEs in what we have now.