Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies #55

Closed
Ilshidur opened this issue Aug 2, 2017 · 3 comments
Closed

Update dependencies #55

Ilshidur opened this issue Aug 2, 2017 · 3 comments

Comments

@Ilshidur
Copy link

Ilshidur commented Aug 2, 2017

Some dependencies of the version 3.0.2 are vulnerable. It would be nice to update them.

Or at least (in package.json) :
"download": "^4.0.0" to "download": "^5.0.1" because 4.4.3 is vulnerable and 5.0.1 fixed it.

The better would be to update "download": "^4.0.0" to "download": "^6.2.5" (the latest version released).

I can open a PR in case you don't have the time.


EDIT : Seems to be fixed here.

@Ilshidur
Copy link
Author

Ilshidur commented Dec 6, 2017

Is it possible to merge the branch listr ? As it contains the fix for this issue, it would be nice to publish it to npm if this is production ready 👍

Otherwise, I can open a PR with an update of package.json :-)

@benmurden
Copy link

This is now also causing a deprecation warning for gulp-util, which the older download still used.

Unfortunately, it looks like the API has been changed in this branch, and is incompatible with the libraries I tried. They would have to be updated, too.

@rejas
Copy link
Contributor

rejas commented Jul 13, 2018

PR for this is in #65

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants