search

paulomcnally / youtube-node

Youtube api implementation for nodeJS
https://www.npmjs.com/package/youtube-node
Apache License 2.0
108 stars 53 forks source link

fix: update to @dabh/colors for security vuln #62

Closed mannyluvstacos closed 2 years ago

mannyluvstacos commented 2 years ago

A Security Vuln was identified in the Colors package for >1.4.0, offending packages being 1.4.1, 1.4.44-liberty

This PR updates the color package to using @dabh/colors as stated on this colors issue #317 which is a safe alternative.

mannyluvstacos commented 2 years ago

For your consideration when you have a moment, @paulomcnally 🙂

ethnh commented 2 years ago

Hello Manny, This project has not had a commit in 2 years?

Colors.js has already removed the offending version ( https://www.npmjs.com/package/colors?activeTab=versions ) There is no need for this change 👍