[wp-trac] [WordPress Trac] #48203: Update/Audit npm Dependencies

WordPress Trac noreply at wordpress.org
Thu Oct 3 20:54:04 UTC 2019


#48203: Update/Audit npm Dependencies
------------------------------+---------------------
 Reporter:  whyisjake         |       Owner:  (none)
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  5.4
Component:  Build/Test Tools  |     Version:
 Severity:  normal            |  Resolution:
 Keywords:  has-patch         |     Focuses:
------------------------------+---------------------
Changes (by desrosj):

 * keywords:   => has-patch
 * milestone:  Awaiting Review => 5.4


Comment:

 Was there a reason for going with an exact version number instead of a
 range like `~3.1.0`? Other than that, this looks good. I'm putting this in
 5.4, but I don't feel strongly against committing this before 5.3 beta 3
 if you have the time, @whyisjake.

 For reference, before this change the issues were listed as: `26
 vulnerabilities (16 low, 7 moderate, 3 high)` and after the patch, the
 issues are listed as `3 vulnerabilities (1 low, 2 high)`.

 Also, the results of `grunt imagemin` should also be committed after
 upgrading `grunt-contrib-imagemin` for consistency.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/48203#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list