Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

npm WARN deprecated minimatch@0.2.14: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue #1948

Closed
stephenfeather opened this issue Jul 25, 2016 · 1 comment
Assignees
Labels
Milestone

Comments

@stephenfeather
Copy link
Contributor

├─┬ nativescript@2.1.1
│ ├─┬ gaze@1.0.0
│ │ └─┬ globule@0.2.0
│ │ ├─┬ glob@3.2.11
│ │ │ └── minimatch@0.3.0
│ │ └── minimatch@0.2.14

This is a flaw inherited from dependancies. gaze was updated to 1.1.0 on Apr 27th, globule updated a month ago (Jun 22) to upgrade minimatch

@rosen-vladimirov
Copy link
Contributor

Hi @stephenfeather ,
Thanks for reporting this. I've submitted a PR for updating some of the dependencies, including gaze. However the warning for minimatch version is still in the output as there's no new version of broccoli dependency. Also at the moment we can use only a specific version of node-inspector, which depends on old version of minimatch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

4 participants