[wp-trac] [WordPress Trac] #48203: Update/Audit npm Dependencies
WordPress Trac
noreply at wordpress.org
Thu Oct 3 20:54:04 UTC 2019
#48203: Update/Audit npm Dependencies
------------------------------+---------------------
Reporter: whyisjake | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: 5.4
Component: Build/Test Tools | Version:
Severity: normal | Resolution:
Keywords: has-patch | Focuses:
------------------------------+---------------------
Changes (by desrosj):
* keywords: => has-patch
* milestone: Awaiting Review => 5.4
Comment:
Was there a reason for going with an exact version number instead of a
range like `~3.1.0`? Other than that, this looks good. I'm putting this in
5.4, but I don't feel strongly against committing this before 5.3 beta 3
if you have the time, @whyisjake.
For reference, before this change the issues were listed as: `26
vulnerabilities (16 low, 7 moderate, 3 high)` and after the patch, the
issues are listed as `3 vulnerabilities (1 low, 2 high)`.
Also, the results of `grunt imagemin` should also be committed after
upgrading `grunt-contrib-imagemin` for consistency.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/48203#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list