microsoft / microsoft/vscode-livepreview
webpack dependency update
Open
Beginner friendly
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 596
- Forks
- 119
- Avg merge
- 1d 4m
- Merged PRs (30d)
- 5
Description
Our internal security team found two high-level warnings for the Live Preview extension. Both are related to "copy-webpack-plugin" v.11.0.0.
They are suggesting that this dependency be upgraded to v14.0.0 for my development team before using the extension. Is this update on your roadmap or will it be any time soon?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Locate the extension's dependency manifest and build entry points, then inspect how copy-webpack-plugin v11.0.0 is used. Update it to v14.0.0 and run the available extension build or checks; done means the build still passes and the two reported dependency warnings are resolved.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript, webpack
- Domain
- build-system, devtools
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 64/100