Hi,
I've found this package used by a team at my org. It's useful to us, but it's triggering a bunch of security alerts.
One of this package's dependencies is ansi-escape which brings in a bunch of dependencies with known issues.
Here's what it looks like: https://socket.dev/npm/package/ansi-escape/overview/1.1.0
And it seems you could easily replace it with ansi-escapes that's in much better condition.
LMK if you'd be willing to do that or accept a PR with the change.
Hi,
I've found this package used by a team at my org. It's useful to us, but it's triggering a bunch of security alerts.
One of this package's dependencies is
ansi-escapewhich brings in a bunch of dependencies with known issues.Here's what it looks like: https://socket.dev/npm/package/ansi-escape/overview/1.1.0
And it seems you could easily replace it with
ansi-escapesthat's in much better condition.LMK if you'd be willing to do that or accept a PR with the change.