-
-
Notifications
You must be signed in to change notification settings - Fork 128
Open
Labels
Description
Description
There has been a few exploints found on the dependencies used by ethlint
Steps to reproduce
run npm audit on the ethlint project
You will see the following warnings:
- https://npmjs.com/advisories/146
- https://npmjs.com/advisories/157
- https://npmjs.com/advisories/577
- https://www.npmjs.com/advisories/1490
- https://www.npmjs.com/advisories/1179
- https://npmjs.com/advisories/1084
- https://npmjs.com/advisories/786
Expected behavior
Not to see any warnings
Linter version
version 1.2.5
Comments
This issues can be solved upgrading the version of the dependencies:
- chokidar
- lodash
- commander
- mocha
- nyc
- You should also update
solparseversion of mocha and yargs dependencies. This is done in this PR Dependencies security issues solparse#38
Proposed PR for Ethlint #283
Priority
Medium as we get a lot of alerts and complains from the security team.