cordova-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Shazron <shaz...@apache.org>
Subject [DISCUSS] Use of nsp (node security cli) finds first vulnerable library that we use
Date Sat, 25 Jun 2016 08:15:01 GMT
I think it's the first [1].

This is in cordova-coho [2], from a test [3] that our former intern Vishal
(now employee) added. I'm not sure if any other repos are using a nsp test
besides coho.

We should add this check to our other repos that use node libraries.

Thoughts?

[1] https://issues.apache.org/jira/browse/CB-11484
[2] https://github.com/apache/cordova-coho
[3]
https://github.com/apache/cordova-coho/blob/c802314090dc262ef41444397a646f5bd178b3db/package.json#L32

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message