commitizen / commitizen/cz-conventional-changelog

NPM audit reports low vulnerability in dependency

Open
#121 3 comments 4 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
793
Forks
444
PR merge metrics
No merged PRs in 30d

Description

Current with version 3.2.0, there is a low vulnerability.

npm audit --registry https://registry.npmjs.org

Low Prototype Pollution
Package lodasy
Patched in > 4.17.19
Path cz-conventional-changelog > commitizen > lodash
More info https://npmjs.com/advisories/1523

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.