summaryrefslogtreecommitdiff
path: root/package.json
diff options
context:
space:
mode:
authorSheogorath2019-04-10 13:07:54 +0200
committerSheogorath2019-04-10 13:11:57 +0200
commite014a7339390693383ad00a020b8e3337f780f19 (patch)
treed481b90e699ec89b47171f966ce3c17987a7516c /package.json
parentef348fc49b01711aaea3c0b68cdd9fa77876c596 (diff)
Update meta-marked to fix possible vulnerabilities
Snyk informed us about possible vulnerabilities in meta-marked. It seems like at least some of them were already address by HackMD around a year ago but never pushed upstream to CodiMD. This patch provides a fix by using an up-to-date dependency from our own repository with CI integration. Details: https://app.snyk.io/vuln/SNYK-JS-JSYAML-174129 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
Diffstat (limited to 'package.json')
-rw-r--r--package.json2
1 files changed, 1 insertions, 1 deletions
diff --git a/package.json b/package.json
index 4d209277..331d42d4 100644
--- a/package.json
+++ b/package.json
@@ -81,7 +81,7 @@
"mathjax": "~2.7.0",
"mattermost": "^3.4.0",
"mermaid": "~7.1.0",
- "meta-marked": "^0.4.2",
+ "meta-marked": "git+https://github.com/codimd/meta-marked#semver:^0.4.2",
"method-override": "^2.3.7",
"minimist": "^1.2.0",
"minio": "^6.0.0",