Skip to content
This repository has been archived by the owner on Aug 30, 2022. It is now read-only.

Outdated dependency #37

Open
michaldudak opened this issue Aug 1, 2022 · 0 comments
Open

Outdated dependency #37

michaldudak opened this issue Aug 1, 2022 · 0 comments

Comments

@michaldudak
Copy link

This package depends on update-notifier@^4.1.0, which, in turn, transitively depends on got@^9.6.0. The got package has a security vulnerability (see https://github.com/mui/material-ui/security/dependabot/72).
Updating update-notifier to the latest 6.0.2 does solve the dependency problem, but it also causes errors when running argos-cli. It's because v6.0.0` moved to pure ESM modules and doesn't work with CommonJS packages.
The fix would require transitioning argos-cli to ESM as well.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant