rollup-plugin-minify-html-literals
rollup-plugin-minify-html-literals copied to clipboard
fix: Update outdated and vulnerable packages
Changes
- All dev dependencies raised to latest versions.
- Added rollup ^4.0.0 as a supported peer dependency.
- Fixed typing errors in test.
- Added myself as contributor
Leftovers
# npm audit report
request *
Severity: moderate
Server-Side Request Forgery in Request - https://github.com/advisories/GHSA-p8p7-x288-28g6
Depends on vulnerable versions of tough-cookie
No fix available
node_modules/request
coveralls *
Depends on vulnerable versions of request
node_modules/coveralls
tough-cookie <4.1.3
Severity: moderate
tough-cookie Prototype Pollution vulnerability - https://github.com/advisories/GHSA-72xf-g2v4-qvf3
No fix available
node_modules/tough-cookie
3 moderate severity vulnerabilities
Some issues need review, and may require choosing
a different dependency.
Testing
Ran the test included in the project.
@bennypowers , @deebloo , @asyncLiz any chance of getting this merged so we can update rollup? Or @tonyganchev did you find an alternative to this that is still supported?