-
Notifications
You must be signed in to change notification settings - Fork 26
Open
Description
This library has a high severity dependency (underscore 1.6.0).
└─┬ eslint-plugin-i18n-json@3.1.0
└─┬ jsonlint@1.6.3
└─┬ nomnom@1.8.1
└── underscore@1.6.0
I did some digging. nomnom has been deprecated and jsonlint has been abandoned for a long time (there are 409 forks). An open PR has resolved this issue.
The code of jsonlint is actually pretty simple. You could probably include it yourself internally so you don't have an insecure dependency out of your control which has long since been abandoned.
Metadata
Metadata
Assignees
Labels
No labels