heroku / heroku/heroku-buildpack-nodejs
Warn on Node versions with known security vulnerabilities / old versions
Open
enhancement
- Dominant language
- Shell
- Stars
- 1.3k
- Forks
- 2.6k
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 30
Description
Context: https://groups.google.com/forum/#!topic/nodejs-sec/FG8glRVxS7Q
Context: https://groups.google.com/forum/#!topic/nodejs-sec/cmhZtHMfnko
While it's up to the developer to make sure they are running a version of Node without known security vulnerabilities, we can help them understand that they are making that decision by adding a warning with a link to a FAQ in the build.
Contributor guide
Assessment
This issue has not been assessed yet.