Bump node-pre-gyp package to @mapbox/node-pre-gyp
prashant93 opened this issue · 2 comments
prashant93 commented
#63 PR already raised for this
@dainis here gcstats using old version of node-pre-gyp can you update this package to prevent vulnerability for tar package
https://www.npmjs.com/package/node-pre-gyp
| -- gc-stats@1.4.0 |
-- node-pre-gyp@0.13.0
| `-- tar@4.4.8
Ghazgkull commented
@prashant93 This package/repository is abandoned. There is a fork created by someone in the community here which was created to update the dependencies: https://github.com/adnanrahic/node-gcstats/issues
Could you consider reporting this there?
prashant93 commented
Thanks for the update @Ghazgkull