Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Latest version stills installs htmlhint 0.9.13 which installs also minimatch 0.3.0 with vulnerabilities #20

Open
@juansaab

Description

Describe the bug
When I install the latest version of the module I got a warning of security vulnerability

npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated minimatch@0.3.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue

To Reproduce
Steps to reproduce the behavior:

  1. Run `npm install htmlhint-loader --save-dev
  2. Error appears

Expected behavior
Install the latest version of htmlhint which already uses the correr minimatch package

Screenshots

image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

        AltStyle によって変換されたページ (->オリジナル) /