ember-cli / ember-cli/ember-try-config

Update package `package-json` to remove vulnerability from `got` package

Open
#194 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
JavaScript
Stars
1
Forks
7
PR merge metrics
No merged PRs in 30d

Description

The `package-json` package on this addon is outdated and should be updated.

`package-json` v6 brings as dependency `got` v9 which has a vulnerability.

Updating the version `package-json` to v8 or newer removes in any addon which is using `ember-try` this vulnerability.
This update will be braking, because `package-json` has dropped node version (< v18)

See:
https://github.com/advisories/GHSA-pfrx-2q88-qq97

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.