casesandberg / casesandberg/react-color
Updating package dependencies
Open
- Dominant language
- JavaScript
- Stars
- 12.3k
- Forks
- 920
- PR merge metrics
- No merged PRs in 30d
Description
Hi! Is there a possibility to upgrade lodash dependency form 4.17.11 to >= 14.17.12?
It cause the issue during performing a vulnerability audit against the installed packages.
Contributor guide
Research direction
Begin by locating the repository's dependency manifest and confirming the lodash version and the intended target; the issue text's ">= 14.17.12" may need clarification. Done means lodash is upgraded without breaking the project and the vulnerability audit no longer reports this dependency.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, react
- Domain
- frontend, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100