look into vulnerabilities  #130

Activity

1. lm-n

   self-assigned this

   on Sep 20, 2018
2. lm-n

   added

   ver0.2.0

   on Sep 20, 2018
3. lm-n commented on Sep 23, 2018

   

   lm-n

   on Sep 23, 2018

   MemberAuthor

   More actions

   @spiray can we look for an alternative to grunt open?
4. spiray commented on Sep 26, 2018

   

   spiray

   on Sep 26, 2018

   Contributor

   More actions

   @lm-n We would have to change the testing approach completely without open.

   1. Do you want to see what the other p5 libraries are doing first?
   2. Does this vulnerability even matter to us if it is strictly a devDependency and it isn't subject to injection. Am i understanding the vulnerability correctly?
5. mithru commented on Sep 30, 2018

   

   mithru

   on Sep 30, 2018

   Contributor

   More actions

   @spiray I believe you're right about it just being a devDependency. The only reason why we might want to change is for newer people wanting to contribute to the library. I think we should skip this for now, and discuss this after 0.2.0
6. spiray commented on Oct 4, 2018

   

   spiray

   on Oct 4, 2018

   Contributor

   More actions

   @mithru OK. Can you remove the ver0.2.0 tag?
7. mithru

   removed

   ver0.2.0

   on Oct 4, 2018