search

sasstools / scss-tokenizer

A tokenzier for Sass' SCSS syntax
MIT License
24 stars 22 forks source link

Update babel - Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue #8

Closed jharris4 closed 7 years ago

jharris4 commented 7 years ago

I just started getting the following warning when installing node-sass (which depends on this package):

warning node-sass > sass-graph > scss-tokenizer > babel-core > minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue

I'm assuming this is because this project/package depends on babel-core ^5.4.3.

babel-core 5.x has a dependency on minimatch ^2.0.3 whereas babel-core 6.x has a dependency on minimatch ^3.0.2

xzyfer commented 7 years ago

Fixed by #11