commitizen / commitizen/cz-cli
Minimist dependent package vulnerability due to older version usage
未关闭
- 主要语言
- JavaScript
- 星标
- 17.5k
- 派生
- 566
- 平均合并
- 8 小时 16 分钟
- 30 天内合并 PR
- 1
描述
Hi,
We are using commitizen package in our microservice api. As we know commitizen has a dependency on minimist package and it shows us a vulnerablility during our docker image scan.
Could you guys please update your package to a newer version or may be upgrade the minimist package to it's fixed version which is **1.2.6**?
Hope to see the resolution soon on this issue. Thanks !
贡献指南
评估
这个 Issue 还没有评估数据。