-
Notifications
You must be signed in to change notification settings - Fork 98
Description
Describe the bug
I am trying to integrate karma-accessibility-checker 3.1.78 in my project where Whitesource is enabled in pipeline.
To Reproduce
Steps to reproduce the behavior:
- run npm install in root folder of karma-accessibility-checker
- This will generate the package-lock.json that includes 9 entries that are listed in national vulnerability database
Expected behavior
The project should use dependencies that are not listed in national vulnerability database.
Additional context
I am currently stuck integrating karma-accessibility-checker in my project as we have security checks enabled. I have added multiple dependencies like hawk in my project with a newer version to convince that the older version with the violation is not used. As https://github.com/request/request is deprecated and all versions are listed as security issue this is currently the reason why I cannot use karma-accessibility-checker.