You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@openwhisk.apache.org by GitBox <gi...@apache.org> on 2022/02/07 09:33:25 UTC
[GitHub] [openwhisk-wskdebug] shazron opened a new issue #95: security issue: use alternative to isomorphic-fetch dependency
shazron opened a new issue #95:
URL: https://github.com/apache/openwhisk-wskdebug/issues/95
The library does not seem maintained, especially since it depends on node-fetch which has a security issue that is still unpatched:
https://github.com/matthew-andrews/isomorphic-fetch/pull/204
The last release for isomorphic-fetch is Sep 2020, about 16 months ago.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@openwhisk.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [openwhisk-wskdebug] shazron commented on issue #95: security issue: use alternative to isomorphic-fetch dependency
Posted by GitBox <gi...@apache.org>.
shazron commented on issue #95:
URL: https://github.com/apache/openwhisk-wskdebug/issues/95#issuecomment-1031266309
https://github.com/matthew-andrews/isomorphic-fetch/pull/204#issuecomment-1026921194 [cross-fetch](https://github.com/lquixada/cross-fetch#why-not-isomorphic-fetch) seems to be a drop-in alternative
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@openwhisk.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org