jantimon / jantimon/iconfont-webpack-plugin

bump svg2ttf to >= 5.2

Open
#63 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
111
Forks
34
PR merge metrics
No merged PRs in 30d

Description

Bump `svg2ttf` to v5.2 (to check if possible v6) fix vulnerability [GHSA-h6q6-9hqw-rwfv](https://github.com/advisories/GHSA-h6q6-9hqw-rwfv)

This library has bumped deps in v5.2 to fix such vulnerability. See:

https://github.com/fontello/svg2ttf/blob/d8a426247c6f61b00e4cdd5bd36ec0c57b404444/package.json#L33

Contributor guide

No contributing guide indexed for this repository

Research direction

Inspect the repository's dependency declaration for `svg2ttf`, then compare the v5.2 dependency changes linked in the issue and assess whether v6 is compatible. Run the project's existing tests or build checks after the update; done means the vulnerability is addressed without regressions.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
build-system, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.