New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ghost 3.0 下，JS 各个依赖包需要升级到安全版本 #23

Open

halfrost opened this issue Jul 23, 2020 · 1 comment

Labels

Owner

halfrost commented Jul 23, 2020

RT，不然有安全漏洞的危险

halfrost added the enhancement label

halfrost added a commit that referenced this issue


          Merge pull request #27 from halfrost/update_npm

c2507f0

update npm #23

Owner Author

halfrost commented Jul 23, 2020

虽然升级了 npm update，但是在 package-lock.json 里面还是存在风险依赖，所以还需要再考虑是否修改 package-lock.json

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment