forcedotcom / forcedotcom/dx-empty
Security vulnerability in package.json
Open
- Dominant language
- JavaScript
- Stars
- 59
- Forks
- 87
- PR merge metrics
- No merged PRs in 30d
Description
There is a security vulnerability in the package.json, due to an older version of semver. This module is transitively dependent on it:
"@salesforce/eslint-config-lwc": "^3.2.3"
It should be upgraded to the most recent version, or removed altogether.
https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.