gregnb / gregnb/mui-datatables
Upgrade lodash.merge to 4.6.2
Open
duplicate
- Dominant language
- JavaScript
- Stars
- 2.7k
- Forks
- 906
- PR merge metrics
- No merged PRs in 30d
Description
The current dependency of lodash.merge has a known vulnerability for version 4.6.0, fixed in 4.6.2: https://www.npmjs.com/advisories/1066.
Would it be possible to upgrade to lodash.merge 4.6.2?
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the lodash.merge dependency declaration and review the linked npm advisory for the affected and fixed versions. Done means the project uses lodash.merge 4.6.2 and its dependency checks still pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 1/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 55/100