Skip to content

Update svgo to version 1.2.2 or higer #77

@tiritto

Description

@tiritto

There are 2 vulnerabilities in js-yaml that svgo used to have on its dependency list. svgo maintainers fixed that issue with the release of 1.2.2, however crass is still using outdated version of svgo (0.7.2) causing vulnerability notifications to pop out on npm, which in result might scare off many people from using that amazing tool.

Related vulnerabilities:
https://npmjs.com/advisories/813
https://npmjs.com/advisories/788

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions