Depends on vulnerable versions of trim

scottcorgan / tap-out

A different tap parser

MIT License

23 stars 28 forks source link

Open nicocube opened 3 years ago

nicocube commented 3 years ago

Hi, could you bump the version of your dependency on trim on last version 1.01 ?

Your version of the trim package is flagged as high severity by npm audit.

Thanks in advance.

mixmix commented 2 years ago

The fix seems to have been merged (commit), but we need a new npm release of tap-out

@scottcorgan would you mind doing that please? (that or add a trusted friend with publishing rights to the module)