search

veged / ometa-js

OMeta for JavaScript
http://veged.github.com/ometa-js/
MIT License
83 stars 15 forks source link

upgrade uglifyjs due to nodejs security advisories #34

Open grawk opened 7 years ago

grawk commented 7 years ago

https://nodesecurity.io/advisories/39 https://nodesecurity.io/advisories/48

Update to version 2.6.0 or later

gabrielcsapo commented 6 years ago

could be moved to use https://github.com/ternjs/acorn

grawk commented 6 years ago

I spent some time trying to understand how to hook up the new version of uglify. I'll admit it's beyond my ability (or at least within the time I spent) to understand what's going on in this module 😆

If someone else wants to take a crack at adapting acorn or the newer version of uglify, that'd be awesome.

But in general, since this module appears to be drifting, it's probably best to move away from it entirely unless someone decides to adopt it.