commitizen / commitizen/cz-cli
Minimist dependent package vulnerability due to older version usage
Đang mở
- Ngôn ngữ chính
- JavaScript
- Star
- 17.5k
- Fork
- 566
- Merge trung bình
- 8 giờ 16 phút
- Pull request đã merge (30 ngày)
- 1
Mô tả
Hi,
We are using commitizen package in our microservice api. As we know commitizen has a dependency on minimist package and it shows us a vulnerablility during our docker image scan.
Could you guys please update your package to a newer version or may be upgrade the minimist package to it's fixed version which is **1.2.6**?
Hope to see the resolution soon on this issue. Thanks !
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.