search

prebuild / prebuild-install

Minimal install client for prebuilds.
MIT License
104 stars 75 forks source link

Resolve vulnerability in dependencies (simple-get < 4.0.1) #172

Closed timondev closed 2 years ago

timondev commented 2 years ago

https://security.snyk.io/vuln/SNYK-JS-SIMPLEGET-2361683

update simple-get dependency from ^4.0.0 to at least ^4.0.1 to negate security risk.

"dependencies": {
    "simple-get": "^4.0.0" 
},

to

"dependencies": {
    "simple-get": "^4.0.1" 
},

it seems that this is not a breaking change (aka no further changes were made to simple-get)

vweevers commented 2 years ago

https://github.com/prebuild/prebuild-install/pull/167#issuecomment-1023074227