fulcrumapp/fulcrum-js

Update outdated dependency package

Opened this issue · 1 comments

Issue - outdated dependencies

The latest possible version that can be installed is 1.7.3 because of the following conflicting dependency:

fulcrum-app@2.5.0 requires node-fetch@^1.0.1 via portable-fetch@3.0.0
The earliest fixed version is 2.6.7.

Possible resolutions:

update dependencies to fixed version of node-fetch or refactor to remove vulnerable dependency package.

ditto. Please fix.
image