66 Vulnerabilities found in npm dependencies about leon HOT 9 CLOSED

@louistiti Thanks! I'm really excited about what you have made and would love to contribute. Keep hustling!

from leon.

⬆️ [1.0.0-beta.1] Update jest-extended once they updated brace

from leon.

✨ Implement a tool such as Greenkeeper

from leon.

Hello @abhisheksoni27,

Thanks for reporting. Since yesterday, it seems that is caused by braces which is used by the jest-extended package. There is a PR over there.

I will consider using Greenkeeper. I attributed a roadmap card for that.
And I created another roadmap card regarding jest-extended itself.

from leon.

Thanks for your support!

I'm looking forward for your contribution then 👍

from leon.

I upgraded Jest to the latest (24.1.0), which decrease the vulnerabilities to 3 low severity vulnerabilities 5474b6e.

For the reminding vulns:

• It seems an update to Babel 7+ will be necessary: babel/babel#9550.
• Still waiting for the merge: jest-community/jest-extended#198.
• Waiting for the merge: BrowserSync/browser-sync#1659.

from leon.

Browsersync has been upgraded. Now 2 low severity vulnerabilities left.

• It seems an update to Babel 7+ will be necessary: babel/babel#9550.
• Still waiting for the merge: jest-community/jest-extended#198.

from leon.

🔧 [1.0.0-beta.3] Remove minor dependencies vulns: back to 0 vuln

from leon.

Good news, I've:

• Made the upgrade to Babel 7+.
• Created a fork of the jest-extended package to get away from the vulnerability.

I'll close this issue now as we came back to 0 npm dependencies vulnerabilities. Feel free to create a new issue if you spot a new one.

from leon.