You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I've found this package used by a team at my org. It's useful to us, but it's triggering a bunch of security alerts.
One of this package's dependencies is ansi-escape which brings in a bunch of dependencies with known issues.
Here's what it looks like: https://socket.dev/npm/package/ansi-escape/overview/1.1.0
And it seems you could easily replace it with ansi-escapes that's in much better condition.
LMK if you'd be willing to do that or accept a PR with the change.
The text was updated successfully, but these errors were encountered:
Hi,
I've found this package used by a team at my org. It's useful to us, but it's triggering a bunch of security alerts.
One of this package's dependencies is
ansi-escape
which brings in a bunch of dependencies with known issues.Here's what it looks like: https://socket.dev/npm/package/ansi-escape/overview/1.1.0
And it seems you could easily replace it with
ansi-escapes
that's in much better condition.LMK if you'd be willing to do that or accept a PR with the change.
The text was updated successfully, but these errors were encountered: