Skip to content

[email protected] - security vulnerabilty warning #1171

Open

Description

@maxbbender

Hey! A dependency of clasp glob looks like it has security vulnerabilities on 10.5. It triggers a warning when installing.

I searched issues and found one for gemini-cli but none for clasp

google-gemini/gemini-cli#18327

Should this project look at bumping this version? It appears the vulns are for versions <10.5 but this warning is confusing and alarming at first look.

╭─admin@admins-MacBook-Pro-2 ~/Documents/github
╰─➤  npm install @google/clasp -g
npm warn deprecated [email protected]: Use your platform's native DOMException instead
npm warn deprecated [email protected]: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting [email protected]

added 295 packages in 9s

105 packages are looking for funding
  run `npm fund` for details

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions