Vulnerability issue with ws
cocoliliace opened this issue · comments
Hi I'm new to open source so sorry if this is idiodic, but I've been getting security alerts from github's dependabot saying that there is a vulnerbility issue with ws with version <= 7.4.6. I'm wondering if we should upgrade the version of ws in package.json
. I made a pull request that fixes this: #139
For more information, this is what the full security alert says:
Thanks!
This package does not operate a websocket server and is therefore unaffected.