Skip to content

Fix security vulnerabilities

Boris Budini requested to merge security-audit into master

Before

added 3 packages from 36 contributors and audited 28126 packages in 6.194s
found 81 vulnerabilities (61 low, 18 moderate, 2 high)
  run `npm audit fix` to fix them, or `npm audit` for details

After

audited 27838 packages in 4.581s
found 2 moderate severity vulnerabilities
  run `npm audit fix` to fix them, or `npm audit` for details

Basically I've run npm audit fix and removed npm-check-updates because I don't think this module should be a "runtime" dependency. Arguably we could add it in the devDependency but this library has 18 dependencies and quite a few high severity vulnerabilities. So I think it's better to install it when you need it.

Merge request reports