Skip to content

Conversation

wcatron
Copy link

@wcatron wcatron commented Oct 6, 2022

  • move undici to peer dependency to allow greater flexibility for consumers to upgrade
  • upgrade undici to at least version 5 to resolve security vulnerability
  • update tests for AVA 4

- move undici to peer dependency to allow greater flexibility for consumers to upgrade
- upgrade undici to at least version 5 to resolve security vulnerability
- update tests for AVA 4
@gabrielbahniuk
Copy link

gabrielbahniuk commented Oct 24, 2022

@StarpTech We've just moved from rest to http data source, but we are unable to deploy due to security vulnerabilities and would really appreciate if this PR can be merged. Do you think that's possible? Thank you, and thanks to @wcatron for the PR 🥇

@rbschumacher
Copy link

Hey guys, any updates on this matter? I'll problably need to migrate to another library due to this security issue 😞

@StarpTech
Copy link
Owner

Hi, I'm longer using this module in production. It's more or less unmaintained. I'm open to contributors. Please contact me on Twitter.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants