paulirish / pwmetrics

Progressive web metrics at your fingertipz
Apache License 2.0
1.25k stars 74 forks source link

Update `googleapis` dependency #220

Closed vvscode closed 4 years ago

vvscode commented 5 years ago

Steps to reproduce.

yarn audit

Stack trace

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Improper Authorization                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ googleapis                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=39.1.0                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ pwmetrics                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ pwmetrics > googleapis                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/791                         │
└───────────────┴──────────────────────────────────────────────────────────────┘

Environment

  1. pwmetrics version: 4.2.2
JonnyVaine commented 4 years ago

I can't add anything to this, other than trying to force a response to this. Facing the same issue in npm. Please update!

vvscode commented 4 years ago

@denar90 @paulirish

denar90 commented 4 years ago

Just released a patch. @vvscode @JonnyVaine can you take a look if it works for you?

JonnyVaine commented 4 years ago

@denar90 this works for me! Thanks for looking into this so quickly

denar90 commented 4 years ago

Cool!