search

renke / import-sort

Sort ES2015 (aka ES6) imports. Both JavaScript and TypeScript are supported.
ISC License
466 stars 73 forks source link

Security vulnerability in import-sort-cli #115

Open jtart opened 4 years ago

jtart commented 4 years ago

There is a low level security vulnerability in the yargs library that is used in the import-sort-cli. Bumping to latest should fix the issue.

Screenshot from using npm audit

image
haysclark commented 4 years ago

Adding NPM advisory 1500 link.

taybin commented 4 years ago

This library hasn't been updated since 2019. Maybe it needs a fork to fix the security issues in its dependencies?