Dependabot alerts require a joint review and perhaps some updates to close some

rcpch / digital-growth-charts-react-client

A React Client for the RCPCH Growth Charts API

https://growth.rcpch.ac.uk/

MIT License

8 stars 5 forks source link

Dependabot alerts require a joint review and perhaps some updates to close some #69

Open pacharanero opened 2 years ago

pacharanero commented 2 years ago

Dependabot flags up know vulnerabilities and issues with dependencies, as listed in package.json

There are a few flags here https://github.com/rcpch/digital-growth-charts-react-client/security/dependabot

We could do with setting aside some time to go through and see if we can fix them, perhaps a pairing session?

dc2007git commented 8 months ago

This seems really interesting. Bumping this so we can have a discussion about it as I know @eatyourpeas is keen to resolve dependency vulnerabilities in dGC.