browserify / browserify/tinyify
Tinyify 4.0 depends on a vulnerable version of Terser
Open
- Dominant language
- JavaScript
- Stars
- 405
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
See here: https://github.com/advisories/GHSA-4wf5-vphf-c2xc
Contributor guide
No contributing guide indexed for this repository
Research direction
Read the linked GitHub advisory first, then inspect Tinyify's dependency declarations to identify the affected Terser version. The issue is done when Tinyify no longer depends on the vulnerable version and the dependency update is verified.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- tooling
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100