jantimon / jantimon/iconfont-webpack-plugin
bump svg2ttf to >= 5.2
- Dominant language
- JavaScript
- Stars
- 111
- Forks
- 34
- PR merge metrics
- No merged PRs in 30d
Description
Bump `svg2ttf` to v5.2 (to check if possible v6) fix vulnerability [GHSA-h6q6-9hqw-rwfv](https://github.com/advisories/GHSA-h6q6-9hqw-rwfv)
This library has bumped deps in v5.2 to fix such vulnerability. See:
https://github.com/fontello/svg2ttf/blob/d8a426247c6f61b00e4cdd5bd36ec0c57b404444/package.json#L33
Contributor guide
No contributing guide indexed for this repository
Research direction
Inspect the repository's dependency declaration for `svg2ttf`, then compare the v5.2 dependency changes linked in the issue and assess whether v6 is compatible. Run the project's existing tests or build checks after the update; done means the vulnerability is addressed without regressions.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- build-system, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100