-
Notifications
You must be signed in to change notification settings - Fork 8
Fix security issue by updating decompress-zip #10
Comments
Got the same error while using electron-packager. The problem goes back to your package. |
Actually it's a bit weird, this package is under "electron-archive", supposedly for packages that are not maintained anymore. |
Oh, thats not good. But why is it used then if its no longer maintained? This is a potential risk for every program... |
Please update the decompress-zip to at least Until then I have recommended on packages that use this to replace for a maintained package |
@kevinsawicki You were the last person to commit to this repo. Is this issue something you can look into. |
Got a warning corresponding to this security issue:
https://www.npmjs.com/advisories/777
From the issue description:
The text was updated successfully, but these errors were encountered: