swagger-tools icon indicating copy to clipboard operation
swagger-tools copied to clipboard

update lodash

Open firefoxNX opened this issue 5 years ago • 1 comments
trafficstars

lodash version 4.17.4 had critical vulnerabilities which were fixed. can we upgrade to latest version of lodash?

firefoxNX avatar Dec 13 '19 20:12 firefoxNX

@firefoxNX this repo library isn't maintained anymore. But it's dependency on LoDash is^4.17.4, which means it doesn't restrict consumers from upgrading to new minor and patch versions. There's no reason why you can't run the current version 4.17.15 with Swagger Tools.

mastermatt avatar Dec 30 '19 17:12 mastermatt