diplodoc-platform / diplodoc-platform/transform
Security issue in `svgo@3.2.2`
Open
blocked
- Dominant language
- TypeScript
- Stars
- 69
- Forks
- 59
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 6
Description
There is security issue https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673 in `svgo@3.2.2` so let's bump this deps
See MR #983
Contributor guide
Research direction
Start by reviewing MR #983 and the repository's dependency manifest to locate svgo@3.2.2. Check the linked security advisory, update the dependency as appropriate, and run the existing test suite to confirm the transformer still works without the vulnerable version.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100