threepointone / glamor

inline css for react et al
MIT License
3.66k stars 199 forks source link

Update of dependencies, fbjs mainly #395

Open leiter84 opened 3 years ago

jacob-pettingill commented 3 years ago

Looks like this resolves a "denial of service" vulnerability that is found in node-fetch a sub dependency of the current version of fbjs.

ColtHands commented 2 years ago

Can't wait for this. Why have we started using glamor in the first place? The react package doesn't use it.

tronguye commented 2 years ago

Any issues merging this? It'd be great to be able to take dependency on glamor without the security vulnerability potential of node-fetch.