NativeScript / NativeScript/capacitor-docs
xmldom reported as having security issues
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 36
- Forks
- 2
- PR merge metrics
- No merged PRs in 30d
Description
XmlDom library, which is a dependency of nativescript capacitor is reported as having a security issue : https://github.com/advisories/GHSA-5fg8-2547-mr8q
The people who made this library did fix it, but have published their updates under a new name @xmldom/xmldom. Can you guys update nativescript capacitor to use that instead? It doesn't seem to have any breaking changes other than the name being changed.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Inspect the dependency manifest and lockfile to find the current xmldom entry and how dependencies are validated. Update the dependency to @xmldom/xmldom, then run the repository's existing install, test, or build checks. Done means the project uses the renamed package and the reported security advisory no longer applies.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100