-
Notifications
You must be signed in to change notification settings - Fork 23
Update vulnerable dependency (static-eval) #34
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
👍 |
PR welcome! |
Without a changelog of static-eval@2 it is rather hard to figure out what the breaking change is and how it affects this module. |
@danez I think if the tests pass we should merge it — it's trading off a known bug against a hypothetical bug; this is a fix. Agree it'd be nice if we could test this ahead of time on dependents, but we don't have the infra setup for that now, and don't think we should hold off merging this patch until then. Hope this makes sense! |
Any updates ! |
https://nodesecurity.io/advisories/548
Remediation: Upgrade to static-eval 2.0
The text was updated successfully, but these errors were encountered: