Trying to get in touch regarding a security issue

[JamieSlome]

Hi there,

I couldn't find a SECURITY.md in your repository and am not sure how to best contact you privately to disclose a security issue.

Can you add a SECURITY.md file with an e-mail to your repository, so that our system can send you the vulnerability details? GitHub suggests that a security policy is the best way to make sure security issues are responsibly disclosed.

Once you've done that, you should receive an e-mail within the next hour with more info.

Thanks! (cc @huntr-helper)

[cronvel]

Hi @JamieSlome

The naturalSort() code was borrowed one, and was quite hugly, and unmaintainable. Thanks to this, my NIH syndrome is back! ;)

I have rewritten it from scratch, and there is no RegExp anymore. It's probably 100,000 or even 1 million of times faster now for bigger input (no joke). The fix is published as string-kit v0.12.8 (already on Npm).

Thanks for reporting! ;)

[JamieSlome]

@cronvel - awesome, and no worries! 🎉