search

winstonjs / node-loggly

A client implementation for Loggly in node.js
http://github.com/winstonjs/node-loggly
Other
233 stars 80 forks source link

Upgrade request dependency #40

Closed viggeh closed 10 years ago

viggeh commented 10 years ago

request is now at 2.45.0 while node-loggly requires it at 2.27.0. The biggest problem here is that at 2.27.0, request requires the qs module at 0.6.6 which has known security vulnerabilities. See: https://nodesecurity.io/advisories

There is a nice tool to check potential security vulnerabilities in node modules called nsp, which I recommend using: https://github.com/nodesecurity/nsp

jcrugzz commented 10 years ago

@viggeh good looks

viggeh commented 10 years ago

:heart: