Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: update dependencies based on npm audit #55

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

wcatron
Copy link

@wcatron wcatron commented Oct 6, 2022

  • move undici to peer dependency to allow greater flexibility for consumers to upgrade
  • upgrade undici to at least version 5 to resolve security vulnerability
  • update tests for AVA 4

- move undici to peer dependency to allow greater flexibility for consumers to upgrade
- upgrade undici to at least version 5 to resolve security vulnerability
- update tests for AVA 4
@gabrielbahniuk
Copy link

gabrielbahniuk commented Oct 24, 2022

@StarpTech We've just moved from rest to http data source, but we are unable to deploy due to security vulnerabilities and would really appreciate if this PR can be merged. Do you think that's possible? Thank you, and thanks to @wcatron for the PR 🥇

@rbschumacher
Copy link

Hey guys, any updates on this matter? I'll problably need to migrate to another library due to this security issue 😞

@StarpTech
Copy link
Owner

Hi, I'm longer using this module in production. It's more or less unmaintained. I'm open to contributors. Please contact me on Twitter.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants