opened
pbrose
username_0
Hi All,

This library in it's latest released version (v 3.0.3)  uses lodash v4.17.11. Please can you urgently release a patch using lodash >= v 4.17.12 so that the latest npm versions will not fail npm audit and also open source tools don't fail this version of webide-client-tools?

In particular, this issue is very severe: https://www.npmjs.com/advisories/1065
Cheers
Lodash version < 4.17.12
issue
created
pbrose
username_0
Any update?
comment
created
pbrose
username_0
bump
comment
created
idogoren
username_1
Thanks for reporting the issue. We have an open PR on that:
https://github.com/SAP/webide-client-tools/pull/109
comment
created
idogoren
username_1
A new version was released (3.0.4) with this fix.
comment
closed
idogoren
username_1
issue