search

webmasterish / vuepress-plugin-feed

RSS, Atom, and JSON feeds generator plugin for VuePress 1.x
MIT License
48 stars 13 forks source link

Update lodash.defaultsdeep to the latest version 🚀 #8

Closed greenkeeper[bot] closed 5 years ago

greenkeeper[bot] commented 5 years ago

The dependency lodash.defaultsdeep was updated from 4.6.0 to 4.6.1.

This version is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

Publisher: jdalton License: MIT

Find out more about this release.

FAQ and help There is a collection of [frequently asked questions](https://greenkeeper.io/faq.html). If those don’t help, you can always [ask the humans behind Greenkeeper](https://github.com/greenkeeperio/greenkeeper/issues/new).

Your Greenkeeper bot :palm_tree:

aalemayhu commented 5 years ago

Hei, any plans on merging this? npm audit shows the following issue when adding vuepress-plugin-feed

                       === npm audit security report ===

┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High          │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash.defaultsdeep                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.6.1                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ vuepress-plugin-feed [dev]                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ vuepress-plugin-feed > lodash.defaultsdeep                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/1068                            │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High          │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash.defaultsdeep                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.6.1                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ vuepress-plugin-feed [dev]                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ vuepress-plugin-feed > lodash.defaultsdeep                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/1070                            │
└───────────────┴──────────────────────────────────────────────────────────────┘

Thanks.

webmasterish commented 5 years ago

Hi @scanf

Hopefully soon, I just need to find some time to get to it.

Thanks for reminding me.