jlfwong / jlfwong/chrome2calltree

Update vulnerable dependencies

Open
#9 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
393
Forks
15
PR merge metrics
No merged PRs in 30d

Description

This package has dependencies on vulnerable packages underscore.string and underscore itself.
Please update the dependencies to safety versions.
image
image

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the dependency manifest and checking the declared versions of underscore.string and underscore against current vulnerability information. Update both dependencies to safe versions, then verify that the package installs and its dependency audit reports no remaining vulnerability for them.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
security, tooling
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.