BackstopJS
BackstopJS copied to clipboard
minimist security vulnerability
Is there an alternative to portfinder that could be used?
They don't seem super interested in upgrading mkdirp which relies on a vulnerable version of minimist
https://github.com/http-party/node-portfinder/issues/112
Unfortunately my company has a mono-repo and this bar is pretty much constantly there due to NPM dependencies, and I keep getting a hard time about it 😬
minimist CVE:
https://github.com/advisories/GHSA-xvch-5gv4-984h
