semver@6.3.0 Vulnerability within nyc@15.1.0
rlerma opened this issue · comments
Is this repo still being maintained?
nyc has the following dependency tree based on semver
nyc@15.1.0
├─┬ istanbul-lib-instrument@4.0.3
│ ├─┬ @babel/core@7.19.0
│ │ ├─┬ @babel/helper-compilation-targets@7.19.0
│ │ │ └── semver@6.3.0
│ │ └── semver@6.3.0
│ └── semver@6.3.0
└─┬ make-dir@3.1.0
└── semver@6.3.0
semver@<7.5.2 has a vulnerability
GHSA-c2qf-rxjj-qqgw
No response? 👀
I also need a fix .. any update ?
@coreyfarrell are you able to comment if this repo is still maintained?
Did anyone find any alternative?
@jaws97 After realizing that nyc is not really maintained any longer, our project switched to C8
https://github.com/bcoe/c8