search

stealjs / steal-tools

Build easy. Load fast.
https://stealjs.com/docs/steal-tools.html
MIT License
66 stars 23 forks source link

Update of colors dependency is breaking steal-tools scripts #1162

Closed jflemingsignifi closed 2 years ago

jflemingsignifi commented 2 years ago

The colors.js library was maliciously broken which is causing scripts that use steal-tools to fail

https://github.com/Marak/colors.js/issues/285 https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/

Pining the dependency to 1.4.0 will fix the issue

jflemingsignifi commented 2 years ago

Seems that npm has corrected the issue. 1.4.0 is now used for a clean npm install.