Automattic / Automattic/cli-table
colors package is corrupted
Open
- Dominant language
- JavaScript
- Stars
- 2.3k
- Forks
- 141
- PR merge metrics
- No merged PRs in 30d
Description
The `colors` package was recently fatally corrupted by its owner (see https://github.com/Marak/colors.js/issues/285), and the only remedy is to lock it to version `1.4.0`. Since this project is used in several other major projects it would be very helpful to help mitigate further damage.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the project's dependency manifest and checking how the colors package is currently specified or resolved. Confirm that the dependency is fixed at version 1.4.0, then run the project's available tests or package checks; done means future installs cannot select a corrupted colors release.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, node.js
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 45/100