search

sindresorhus / eslint-plugin-unicorn

More than 100 powerful ESLint rules
MIT License
3.98k stars 361 forks source link

Upgrade read-pkg-up #2371

Closed erezarnon closed 1 month ago

erezarnon commented 1 month ago

Currently we depend through it on semver@5 which has a security vulnerability: CVE-2022-25883

sindresorhus commented 1 month ago

We cannot update this until we move to ESM, which requires moving completely to ESLint flat config.

https://github.com/sindresorhus/eslint-plugin-unicorn/issues/2278