From db84b5a6ceebe1d620dfc11a1d8a98ee53dfcbab Mon Sep 17 00:00:00 2001 From: Hornwitser Date: Tue, 19 Jul 2022 21:23:33 +0200 Subject: [PATCH] Shut up Dependabot (#469) If only the bot was clever enough to see that node-forge is only used for a test that has no user input it might have had the foresight to realize that crying wolf about completely irrelevant security issues will only lead to legitimate issues being ignored in the future. But alas, the AI overlords are not taking over any time soon. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 2fbb199f..3aeb2bfe 100644 --- a/package.json +++ b/package.json @@ -34,7 +34,7 @@ "jsonwebtoken": "^8.2.1", "jszip": "^3.2.2", "mocha": "^9.2.2", - "node-forge": "^0.10.0", + "node-forge": "^1.3.1", "nyc": "^15.1.0", "phin": "^3.5.1" }