cloudhead / cloudhead/node-static

Publish New NPM version for Node-Static

Abierto
#231 18 comentarios 17 reacciones 0 asignados Ver en GitHub
chore
Lenguaje dominante
JavaScript
Estrellas
2.2k
Forks
242
Métricas de merge de PR
Sin PR fusionados en 30 d

Descripción

Hey 👋 I notice its been a while since a new version of node-static has been pushed to NPM, and the version that currently exists there contains the package [minimist](https://www.npmjs.com/package/minimist) which has a ([github advisory](https://github.com/advisories/GHSA-vh95-rmgr-6w4m)) for it. This package was being used which is used by a package in this project called [optimist](https://www.npmjs.com/package/optimist). In [this pull request](https://github.com/cloudhead/node-static/pull/227/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519L29), @brettz9 removed optimist to resolve this vulnerability. As a result, publishing a new version of `node-static` will ensure that all users of this package will use a safe version by default.

cc @cloudhead

Guía de contribución

No hay ninguna guía de contribución indexada para este repositorio

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.