Snyk reports autolinker vulnerability in remarkable dependency.

Open codechennerator opened this issue 6 years ago • 2 comments

Snyk: https://snyk.io/test/npm/remarkable/1.7.4 In order to quiet the autolinker reports by Snyk, would need to update helper-markdown to remarkable 2.0.

Made a PR here: https://github.com/helpers/helper-markdown/pull/10

@jonschlinkert @doowb tagging you two to see if you guys could give it a look. I'm open to any feedback or requirements! :)

Aug 27 '19 18:08 codechennerator

@jonschlinkert or @doowb Sorry for the double ping! I'm hoping to get someone to look at this though!

Sep 12 '19 17:09 codechennerator

+1 Is this something the team is looking into? I've made a few hoops until I got to this repository (from bull-arena > handlebars-helpers > helper-markdown)

Nov 26 '19 01:11 juliofarah