processing / p5.accessibility

p5.accessibility.js makes the p5 canvas more accessible to people who are blind and visually impaired. It can be used with any p5.js sketch and it is used in the p5.js web editor.
GNU Lesser General Public License v2.1
74 stars 27 forks source link

look into vulnerabilities #130

Open lm-n opened 6 years ago

lm-n commented 6 years ago

@spiray can we look for an alternative to grunt open?

spiray commented 6 years ago

@lm-n We would have to change the testing approach completely without open. 1) Do you want to see what the other p5 libraries are doing first? 2) Does this vulnerability even matter to us if it is strictly a devDependency and it isn't subject to injection. Am i understanding the vulnerability correctly?

mithru commented 6 years ago

@spiray I believe you're right about it just being a devDependency. The only reason why we might want to change is for newer people wanting to contribute to the library. I think we should skip this for now, and discuss this after 0.2.0

spiray commented 6 years ago

@mithru OK. Can you remove the ver0.2.0 tag?