Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Move Away from update-notifier #125

Open
loren138 opened this issue Jul 11, 2022 · 0 comments
Open

Move Away from update-notifier #125

loren138 opened this issue Jul 11, 2022 · 0 comments

Comments

@loren138
Copy link

update-notifier has a transient security risk as it eventually uses an old version of got

Sadly, to update to the newest version, you'd have to move to esm.
See: https://github.com/yeoman/update-notifier/releases/tag/v6.0.0

I'm personally fine using it without any update-notifier at all.

But if one is desired, you could follow in the footsteps of nodemon and switch to simple-update-notifier which has far less dependencies. (See: remy/nodemon#2033)

I'm happy to help with a PR for either change but would like a maintainers approval and direction first.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant