pm2
pm2 copied to clipboard
Snyk vulnerability detected for inflight
What's going wrong?
inflight package that pm2 depends on ([email protected] › [email protected] › [email protected] › [email protected]) seems to have a memory leak issue according to Snyk: https://security.snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
glob have removed this dependency v9 onwards: https://github.com/isaacs/node-glob/issues/435
yamljs has essentially be discontinued (last published version was over 6 years ago). Is there anyway we can get pm2 to move away from this package or resolve to a higher glob version?
Hi, @Unitech could you also review this issue please.
This PR should fix it