jlfwong / jlfwong/chrome2calltree
Update vulnerable dependencies
Open
- Dominant language
- JavaScript
- Stars
- 393
- Forks
- 15
- PR merge metrics
- No merged PRs in 30d
Description
This package has dependencies on vulnerable packages underscore.string and underscore itself.
Please update the dependencies to safety versions.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the dependency manifest and checking the declared versions of underscore.string and underscore against current vulnerability information. Update both dependencies to safe versions, then verify that the package installs and its dependency audit reports no remaining vulnerability for them.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security, tooling
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100