andrewrk / andrewrk/node-mv

Upgrade rimraf to latest version

Open
#34 1 comment 5 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
156
Forks
18
PR merge metrics
No merged PRs in 30d

Description

We have a reported security vuln: https://security.snyk.io/vuln/SNYK-JS-INFLIGHT-6095116

Dependency tree looks like this: `bunyan@1.8.15 › mv@2.1.1 › rimraf@2.4.5 › glob@6.0.4 › inflight@1.0.6`

The current solution is to upgrade glob to [beyond v8.](https://github.com/isaacs/inflight/issues/5#issuecomment-1840959215).

`rimraf` seems to already be [on V10 ](https://github.com/isaacs/rimraf/blob/main/package.json#L75).

I was wondering if we can update `rimraf` to the latest version here? It will be greatly appreciated :)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.