Updating mapbox-gl to 1.x

Open serge1peshcoff opened this issue 6 years ago • 1 comments

For now mapbox-gl includes dependencies that include older version of minimist, which has a security vulnerability, which fails my PR checks on my projects.

Can we bump it to 1.x?

Apr 19 '20 20:04 serge1peshcoff

Since mapbox-gl is only referenced as peerDependency, you can use a higher version. You only get a warning, but it should work anyway. (See PR #144 ) Unfortunately, the maintainer seems to leave this project alone, so we have to accept the warning or fork the repository.

Jul 09 '20 12:07 code28