Skip to content

Update uuid package version#205

Open
fenichelar wants to merge 1 commit into
sailshq:masterfrom
fenichelar:patch-1
Open

Update uuid package version#205
fenichelar wants to merge 1 commit into
sailshq:masterfrom
fenichelar:patch-1

Conversation

@fenichelar

Copy link
Copy Markdown

Updated uuid package version from 7.0.0 to 11.1.1 to address GHSA-w5hq-g745-h8pq.

Updated uuid package version from 7.0.0 to 11.1.1 to address GHSA-w5hq-g745-h8pq.
@sailsbot

Copy link
Copy Markdown
Collaborator

Thanks for submitting this pull request, @fenichelar! We'll look at it ASAP.

In the mean time, here are some ways you can help speed things along:

  • discuss this pull request with other contributors and get their feedback. (Reactions and comments can help us make better decisions, anticipate compatibility problems, and prevent bugs.)
  • ask another JavaScript developer to review the files changed in this pull request. (Peer reviews definitely don't guarantee perfection, but they help catch mistakes and enourage collaborative thinking. Code reviews are so useful that some open source projects require a minimum number of reviews before even considering a merge!)
  • if appropriate, ask your business to sponsor your pull request. (Open source is our passion, and our core maintainers volunteer many of their nights and weekends working on Sails. But you only get so many nights and weekends in life, and stuff gets done a lot faster when you can work on it during normal daylight hours.)
  • make sure you've answered the "why?" (Before we can review and merge a pull request, we feel it is important to fully understand the use case: the human reason these changes are important for you, your team, or your organization.)

Please remember: never post in a public forum if you believe you've found a genuine security vulnerability. Instead, disclose it responsibly.

For help with questions about Sails, click here.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updateduuid@​7.0.0 ⏵ 11.1.1100 +199100 +193 +6100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants