-
Notifications
You must be signed in to change notification settings - Fork 29
Open
Description
npm install complains about this:
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High │ Prototype Pollution in node-forge │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ node-forge │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >= 0.10.0 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ parcel-bundler │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ parcel-bundler > node-forge │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://npmjs.com/advisories/1561 │
└───────────────┴──────────────────────────────────────────────────────────────┘
Thanks for sharing, nice effects!
I wish it was written in plain JS though, without any dependencies. Currently it's almost 10000 lines of javascript (>300Kb) when it could be just a few lines of code.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels