xixi52/discord-canvas

Outdated

finnie2006 opened this issue · 1 comments

finnie2006 commented

Discord-canvas currently depends on unsafe dependencies can you update it??

# npm audit report

simple-get  <4.0.1
Severity: high
Exposure of Sensitive Information in simple-get - https://github.com/advisories/GHSA-wpg7-2c88-r8xv
fix available via `npm audit fix --force`
Will install discord-canvas@1.0.0, which is a breaking change
node_modules/simple-get
  canvas  >=2.5.0
  Depends on vulnerable versions of simple-get
  node_modules/canvas
    discord-canvas  >=1.0.1
    Depends on vulnerable versions of canvas
    node_modules/discord-canvas

3 high severity vulnerabilities
Shadyyey commented

Hey! This is currently not an issue.