Skip to content

Upgrade jszip and async to later versions#18

Open
ashleyfrieze wants to merge 1 commit intoMostafa-Samir:masterfrom
ashleyfrieze:fix-dependencies
Open

Upgrade jszip and async to later versions#18
ashleyfrieze wants to merge 1 commit intoMostafa-Samir:masterfrom
ashleyfrieze:fix-dependencies

Conversation

@ashleyfrieze
Copy link

This will reduce some of the exposure to known vulnerabilities. Unfortunately, there's a need for a breaking change to include upgrading to JSzip 3 in order to completely remove known vulnerabilities.

Resolves #16

@ashleyfrieze
Copy link
Author

@Mostafa-Samir - please have a look at whether this is something you can merge?

Is it worth a version 1.x of this package to cover a migration to JSZip 3.x?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Async 1.4.2 vunerabilities

1 participant