search

springload / madewithwagtail

A showcase of sites and apps made with Wagtail CMS, the easy to use, open source Django content management system
http://madewithwagtail.org
MIT License
84 stars 21 forks source link

Adds force resolution on npm package. #138

Closed janzenz closed 3 years ago

janzenz commented 4 years ago

This allows us to restrict the version of transitive dependencies which is not achievable by plain npm. Hence, to give an example we're restricting the version of lodash in here which fixes the critical vulnerability and for the future npm vulnerabilities as well.

PS. This upgrade has inadvertently fix the other vulnerabilities as well.