matthewmueller / matthewmueller/dom-iterator
High severity vulnerabilities
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 34
- Forks
- 6
- PR merge metrics
- No merged PRs in 30d
Description
In version 1.0.1 you have added in this commit a very old and depricated version of cheerio-select: https://github.com/matthewmueller/dom-iterator/commit/cf9c9701b3011b2f5425f8b3582953e8fdc1b5eb#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519R11
This version was released 13 years ago and contains references which contain high severity vulnerabilities and also contain depreciation warnings:
npm warn deprecated CSSwhat@0.4.7: the module is now available as 'css-what'
npm warn deprecated CSSselect@0.7.0: the module is now available as 'css-select'
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Inspect the dependency introduced in the referenced commit and determine how cheerio-select, CSSwhat, and CSSselect enter version 1.0.1. Run the package installation to reproduce the deprecation warnings; done means the outdated vulnerable dependencies are no longer present without breaking the repository's tested iterator behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100