fixing vulnerabilities in handlebars, uglify-js and commander

proj4js / mgrs

Utility for converting between WGS84 lat/lng and MGRS coordinates

MIT License

105 stars 45 forks source link

fixing vulnerabilities in handlebars, uglify-js and commander #55

Closed mlechner closed 4 years ago

mlechner commented 4 years ago

this patch fixes vulnerabilities in outdated dependcies: "handlebars": "4.1.2" -> "4.5.3", "uglify-js": "3.6.0" -> "3.6.9", "commander": "~2.20.0" -> "~2.20.3"

DanielJDufour commented 4 years ago

Hi, @mlechner . I just wanted to let you know that I saw this. I'll review as soon as I can. Thank you!

In the meantime, would you be able to remove the dist/mgrs.js from the Pull Request? I believe the project owners established the practice that we only make a new build in dist when we are cutting a new major release. Thank you!

mlechner commented 4 years ago

replaced by #56 - closing without merge

mlechner commented 4 years ago

another PR for nodejs updates coming soon