hoek 2.x alerts vulnerability issue
cgvirus opened this issue · 2 comments
cgvirus commented
Hello, thanks for this template. Helped a lot to understand bootstrap properly. One thing is package-lock.json has a very old dependency of hoek. Which gives a vulnerability issue. 4.2 version has resolved the issue. Should we update it?
hapijs/hoek#247
davidtmiller commented
I'll look into it. Since npm started adding in security reports at every install I have noticed lots of vulnerabilities but I just haven't had the bandwidth available in order to fix them all yet, but I will be getting to all of these eventually.
davidtmiller commented
Actually this one was quite easy, so it's been updated. Thanks!