expressjs / expressjs/generator
To bump `pug` to latest >3.x.x
Open
- Dominant language
- JavaScript
- Stars
- 1.9k
- Forks
- 548
- PR merge metrics
- No merged PRs in 30d
Description
`pug` it's already in `v3` since a few months ago. Some vulnerability issues are coming with the `v2-beta` version: https://github.com/oscard0m/express-boilerplate/pull/1
Is there any blocker to update this?
https://github.com/expressjs/generator/blob/d1f3fcc6ccc7ab8986fb3438c82ab1a1f20dc50d/bin/express-cli.js#L307
Contributor guide
Assessment
This issue has not been assessed yet.