BaseMax / BaseMax/TextDotsCounterJS
json-schema
- Dominant language
- JavaScript
- Stars
- 5
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
```
Dependabot cannot update json-schema to a non-vulnerable version
The latest possible version that can be installed is 0.2.3 because of the following conflicting dependency:
cypress@8.7.0 requires json-schema@0.2.3 via a transitive dependency on jsprim@1.4.1
The earliest fixed version is 0.4.0.
View logs or learn more about troubleshooting Dependabot errors.
```
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the project's JavaScript dependency declarations and the linked Dependabot logs. Reproduce the conflict involving cypress@8.7.0, jsprim@1.4.1, and json-schema; done means the project can install json-schema 0.4.0 or later without the reported conflict and its existing checks still pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cypress, javascript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100