search

xixi52 / discord-canvas

A package to simplifie the usage of canvas for Discord !
87 stars 45 forks source link

Outdated #52

Open finnie2006 opened 2 years ago

finnie2006 commented 2 years ago

Discord-canvas currently depends on unsafe dependencies can you update it??

# npm audit report

simple-get  <4.0.1
Severity: high
Exposure of Sensitive Information in simple-get - https://github.com/advisories/GHSA-wpg7-2c88-r8xv
fix available via `npm audit fix --force`
Will install discord-canvas@1.0.0, which is a breaking change
node_modules/simple-get
  canvas  >=2.5.0
  Depends on vulnerable versions of simple-get
  node_modules/canvas
    discord-canvas  >=1.0.1
    Depends on vulnerable versions of canvas
    node_modules/discord-canvas

3 high severity vulnerabilities
Shadyyey commented 2 years ago

Hey! This is currently not an issue.