Scott Ewart

Results 3 comments of Scott Ewart

> However, even without updating, I doubt any of these are real concerns, considering that the vulnerable libraries are dependencies of dependencies. How is a vulnerability in a dependency of...

That makes sense. It's not a big deal because the vulnerabilities themselves are not very severe in practice. It sounded like you were saying they're not a problem _because_ they're...

That sounds great! Glad to hear this has been on your radar. Hopefully I'll have time to work on a PR before too long.