New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update is-url-superb package to ^4.0.0 #124

Merged

sindresorhus merged 1 commit into sindresorhus:master from vkarampinis:update-is-url-superb

Oct 3, 2020

Contributor

vkarampinis commented Oct 3, 2020

is-url-superb package prior to version 4 used a vulnerability package url-regex (https://www.npmjs.com/advisories/1550).

Version 4 drops the dependency and makes audit happy again 👍


          update is-url-superb to ^4.0.0

d6b072c

Owner

sindresorhus commented Oct 3, 2020

That vulnerability only affects servers, but fine.

sindresorhus merged commit 67534d6 into sindresorhus:master

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment