Outdated download dependency - needs version bumping
Open
- Dominant language
- JavaScript
- Stars
- 152
- Forks
- 65
- PR merge metrics
- No merged PRs in 30d
Description
The `download` package should be updated to the latest version (it's 8.0.0 now) which would remove the moderate Dependabot issue, caused by a downstream dependency 'got':
https://docs.github.com/en/code-security/dependabot/working-with-dependabot/troubleshooting-dependabot-errors
Contributor guide
No contributing guide indexed for this repository
Research direction
Locate the package manifest and dependency metadata for the `download` package, then inspect how its transitive `got` dependency is reported. Update `download` to version 8.0.0 and verify that the moderate Dependabot issue is resolved.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100