Skip to content

Conversation

@BBosman
Copy link

@BBosman BBosman commented Aug 5, 2016

Currently installing browserify gives a warning:

npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue

This PR updates the glob dependency to the most recent version which uses an updated minimatch version as well.

I ran the tests after the change and they all still pass.

@elieobeid7
Copy link

would you please update glob and push to master?

I have this issue with cordova

http://stackoverflow.com/questions/39727130/npm-warn-deprecated-minimatch2-0-10-but-i-have-a-newer-version

I asked Cordova team on Jira about it, I opened a bug report, it was labeled as critical and they said that bug is because of you guys, browserify hasn't updated to glob-7

This fix is so old an not merged yet, so many projects depend on this library so please merge. If you don't merge soon, I'm going to fork, update dependency and convince Cordova team to use my fork.

@BBosman
Copy link
Author

BBosman commented Feb 8, 2017

Closing due to lack of interest.

@BBosman BBosman closed this Feb 8, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants