New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

colors.js drama indicates a potential dependency update is needed #727

Open

ryust-ax opened this issue Jan 11, 2022 · 1 comment · May be fixed by #786

ryust-ax commented Jan 11, 2022

As a result of recent drama (reported here: https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/)

I tracked down recently updated forks and found two promising future-maintainer candidates:

Incidentally, a good tool for this was https://techgaun.github.io/active-forks/index.htm

zhanwang626 commented Jan 11, 2022

jscodeshift use chalk as dependency instead of colors facebook/jscodeshift#473

gvdp linked a pull request

that will close this issue

Replace malicious colors package with fork #786

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment