Kelvin

Moderate Vulnerability in used static-eval version

1

Can you please consider upgrading static-eval to version >= 2.0.0 where this vulnerability is patched ? Moderate Sandbox Breakout / Arbitrary Code Execution Package static-eval Patched in >=2.0.0 Dependency of...

fix security issues with open replacing it with opn

[vulnerability] All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge

3

In absence of a security policy I am creating the issue here. CVE-2020-28499 https://nvd.nist.gov/vuln/detail/CVE-2020-28499#match-6281551

Implement avoid iddle connections for Azure Redis

1

In redis Azure happens that the conneciton goes iddle after 10 minutes of inactivity and takes time to reconnect. the recommendation is to add a ping to keep the connection...

Server is a digest auth node. ``` HTTPDigest.prototype.request = function (data, options, callback) { var self = this; http.request(options, function (res) { self._handleResponse(data, options, res, callback); }).end(); }; ``` if...

update to vs code 1.25

3

Really nice Can you please update to vs code 1.25 seems most of it is deprecated

problems using the example

2

var digest = require('http-digest-client').createDigestClient('username', 'password'); throws an error. 1. you should change it in: var digest = require('http-digest-client')('username', 'password'); 1. it throws an Error here: HTTPDigest.prototype._parseChallenge = function parseChallenge(digest) {...