react-wordcloud icon indicating copy to clipboard operation
react-wordcloud copied to clipboard

Published 20 hours ago • verified publisher icon chrisrzhou

NPM Audit Issues

Open rhalaly opened this issue 2 years ago • 3 comments

There are npm audit issues in this package related to d3-color:

The d3-color module provides representations for various color spaces in the browser. Versions prior to 3.1.0 are vulnerable to a Regular expression Denial of Service. This issue has been patched in version 3.1.0. There are no known workarounds.

rhalaly avatar Oct 25 '22 08:10 rhalaly

To solve this issue, three dependencies need to be updated:

  • d3-scale needs to be updated to v4+,
  • d3-scale-chromatic and d3-transition need to be updated to v3+.

fresheneesz avatar May 24 '23 16:05 fresheneesz

It doesn't appear that this package is maintained anymore. It's a great package. I'm not sure whether I want to fork it with @fresheneesz updates or if anyone knows of a good alternative package?

aschonfeld avatar Jul 12 '23 15:07 aschonfeld

If someone else stumble upon issues with outdated d3 dependencies. Please feel free to use https://www.npmjs.com/package/react-wordcloud-d3-update-fork

p-pych avatar Nov 08 '23 14:11 p-pych