ras-martin comments

Repositories
Issues
Comments

Results 1 comments of


                                            ras-martin

Replace package 'download'

First of all, `file-type` has a know vulnerability, which is fixed in 16.5.4 and >= 17.1.3 (see [Snyk](https://security.snyk.io/package/npm/file-type)). The used package `decompress-tar` is using a an old and vulnerable version...