You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Sep 10, 2022. It is now read-only.
@istarkov, the fbjs dependency was removed time ago and the PR is already merged into master. However, the latest 0.30.0 version of recompose is still injecting that package inside as it doesn't contain the latest changes to the package.json.
The fbjs is currently pulling inside a vulnerable version of node-fetch making any package consuming recompose as High risk.
Can you please trigger a new release to finally get rid of that extra dependency?
Thank you
The text was updated successfully, but these errors were encountered:
Sign up for freeto subscribe to this conversation on GitHub.
Already have an account?
Sign in.
@istarkov, the
fbjs
dependency was removed time ago and the PR is already merged intomaster
. However, the latest 0.30.0 version ofrecompose
is still injecting that package inside as it doesn't contain the latest changes to thepackage.json
.The
fbjs
is currently pulling inside a vulnerable version ofnode-fetch
making any package consumingrecompose
as High risk.Can you please trigger a new release to finally get rid of that extra dependency?
Thank you
The text was updated successfully, but these errors were encountered: