Is it time to drop sync-request from this project?
Recently github notified me about a vulnerability introduced by markdown-magic through sync-request (which has not been updated in 6 years), that ultimately came from an ancient form-data 2. 5 version. It was nothing to worry about because, as far as I know, markdown-magic doesn't even use sync-request. The only file making a reference is packages/core/src/utils/remoteRequest.js but remoteRequestSync does not seem to be used anywhere.
Is it time to drop
sync-requestfrom this project?Recently github notified me about a vulnerability introduced by
markdown-magicthroughsync-request(which has not been updated in 6 years), that ultimately came from an ancientform-data2. 5 version. It was nothing to worry about because, as far as I know,markdown-magicdoesn't even usesync-request. The only file making a reference is packages/core/src/utils/remoteRequest.js butremoteRequestSyncdoes not seem to be used anywhere.