Skip to content

upgrade uglifyjs due to nodejs security advisories #34

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
grawk opened this issue Aug 11, 2017 · 2 comments
Open

upgrade uglifyjs due to nodejs security advisories #34

grawk opened this issue Aug 11, 2017 · 2 comments

Comments

@grawk
Copy link

grawk commented Aug 11, 2017

https://nodesecurity.io/advisories/39
https://nodesecurity.io/advisories/48

Update to version 2.6.0 or later

@gabrielcsapo
Copy link

could be moved to use https://github.com/ternjs/acorn

@grawk
Copy link
Author

grawk commented Dec 8, 2017

I spent some time trying to understand how to hook up the new version of uglify. I'll admit it's beyond my ability (or at least within the time I spent) to understand what's going on in this module 😆

If someone else wants to take a crack at adapting acorn or the newer version of uglify, that'd be awesome.

But in general, since this module appears to be drifting, it's probably best to move away from it entirely unless someone decides to adopt it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants