rm-modules needs to upgrade to readdirp 2.0.0+ to avoided minimatch security issue
Open
- Dominant language
- JavaScript
- Stars
- 26
- Forks
- 4
- PR merge metrics
- No merged PRs in 30d
Description
rm-modules is using an old version of readdirp which is pulling in a version of minimatch that has a security issue. readdirp 2.0.0+ uses the latest version of minimatch and should resolve the security warning.
WARNING] npm WARN deprecated minimatch@0.2.14: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
[INFO] ├─┬ rm-modules@1.0.2
[INFO] │ ├─┬ map-limit@0.0.1
[INFO] │ │ └── once@1.3.3
**[INFO] │ └─┬ readdirp@1.4.0
[INFO] │ ├── graceful-fs@4.1.11
[INFO] │ ├─┬ minimatch@0.2.14**
[INFO] │ │ └── lru-cache@2.7.3
[INFO] │ └── readable-stream@1.0.34
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.