mochawesome

mochawesome copied to clipboard

Hi all,

We currently used mochawesome to generate reports for cypress runs. And since some weeks we started having some vulnerabilities around opener for the last one). But i see the project didn't live since 2 years now, is there any plan to maintain it in future @adamgruber ? A shame if not, it is reallly helpfull and works fine :)

Thanks

Hey all,

Same situation here as rsi21 Is there some plan to remove opener from mochawesome or some other solution is maybe available ?

Thanks

What are the vulnerabilities with opener that you're seeing?

It's likely these are false positives as indicated by this related issue: https://github.com/domenic/opener/issues/38

We're unfortunately getting a critical vulnerability warning as well. This is for the ip package <1.1.9, which is used by an old version of webpack-dev-server, which in turn is used by mochawesome-report-generator. Any chance this will be updated?

webpack-dev-server is a dev dependency of mochawesome-report-generator. There should be no vulnerability for end users of the package.