You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Feb 15, 2023. It is now read-only.
Just bootstrapped a new svelte project using this template and pushed it to Github. Github now notifies me with a vulnerability warning for the dependency ws. The dependency belongs to rollup-plugin-livereload#livereload, as shown with yarn why ws.
There's an open ticket in livereload to address this vulnerability: napcs/node-livereload#130. Yet I still opened this ticket to bring visibility.
yarn why ws
=> Found "ws@1.1.5"
info Reasons this module exists
- "rollup-plugin-livereload#livereload" depends on it
- Hoisted from "rollup-plugin-livereload#livereload#ws"
The text was updated successfully, but these errors were encountered:
I don't think there's anything to be done here other than leaving this open for visibility until livereload upgrades the ws dependency. Since livereload is only used during development, production builds wouldn't be affected anyway.
Just bootstrapped a new svelte project using this template and pushed it to Github. Github now notifies me with a vulnerability warning for the dependency ws. The dependency belongs to
rollup-plugin-livereload#livereload
, as shown withyarn why ws
.There's an open ticket in livereload to address this vulnerability: napcs/node-livereload#130. Yet I still opened this ticket to bring visibility.
The text was updated successfully, but these errors were encountered: