search

storybookjs / marksy

📑 A markdown to custom VDOM components library
MIT License
354 stars 47 forks source link

fix(deps): update marked dependency #144

Closed johannespfeiffer closed 4 years ago

johannespfeiffer commented 4 years ago

yarn audit returns

yarn audit v1.22.5
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ marked                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.6.2                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ marked                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ marked                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/812                         │
└───────────────┴──────────────────────────────────────────────────────────────┘

Upgrading marked to 1.2.3.

Same as https://github.com/storybookjs/marksy/pull/89 but with yarn.lock instead of package-lock.json