graphdoc
graphdoc copied to clipboard
dependency on insecure abandoned module
Hi,
This library has a dependency on the module slug, which is currently subject to a node security advisory. Looking at the project's Github repo, it does not appear that the maintainer is still around-- their last activity on the repo was in April of 2015, nearly 3 years ago.
Would it be possible to switch to a different dependency? Here are a couple alternatives based on some preliminary research:
- https://www.npmjs.com/package/limax
- https://www.npmjs.com/package/mollusc
Thanks!