hughsk / hughsk/rm-modules

rm-modules needs to upgrade to readdirp 2.0.0+ to avoided minimatch security issue

Open
#3 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
26
Forks
4
PR merge metrics
No merged PRs in 30d

Description

rm-modules is using an old version of readdirp which is pulling in a version of minimatch that has a security issue. readdirp 2.0.0+ uses the latest version of minimatch and should resolve the security warning.

WARNING] npm WARN deprecated minimatch@0.2.14: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue

[INFO] ├─┬ rm-modules@1.0.2
[INFO] │ ├─┬ map-limit@0.0.1
[INFO] │ │ └── once@1.3.3
**[INFO] │ └─┬ readdirp@1.4.0
[INFO] │ ├── graceful-fs@4.1.11
[INFO] │ ├─┬ minimatch@0.2.14**
[INFO] │ │ └── lru-cache@2.7.3
[INFO] │ └── readable-stream@1.0.34

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.