istanbuljs / istanbuljs/test-exclude
PRISMA-2022-0039 in minimatch version 3.0.4 dependency
Open
- Dominant language
- JavaScript
- Stars
- 10
- Forks
- 18
- PR merge metrics
- No merged PRs in 30d
Description
Minimatch is flagged as HIGH vulnerability in PRISMA. Fix version found in 3.0.5.
PRISMA issue link: https://github.com/isaacs/minimatch/commit/a8763f4388e51956be62dc6025cec1126beeb5e6
Can you please check and let me know if more info required?
Contributor guide
No contributing guide indexed for this repository
Research direction
No file or test is named. Locate the dependency declaration and any lockfile that selects minimatch 3.0.4, then inspect the linked minimatch fix and existing test commands. Done means the project uses at least minimatch 3.0.5 and its tests pass without introducing dependency-resolution issues.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100