Skip to content

Commit

Permalink
fix: Replace update notifier with simplified deps (#2033)
Browse files Browse the repository at this point in the history
Closes #1961
Closes #2028

- Fixes security issue with got (CVE-2022-33987)
- Replace update-notifier with simple-update-notifier which does the same thing but has one dependency (semver) rather than several
- Same caching settings as update-notifier

Congratulations and thanks to @alexbrazier 👏 🥇 ❤️
  • Loading branch information
alexbrazier authored Jul 5, 2022
1 parent 8db5f7c commit 176c4a6
Show file tree
Hide file tree
Showing 3 changed files with 61 additions and 480 deletions.
2 changes: 1 addition & 1 deletion bin/nodemon.js
Original file line number Diff line number Diff line change
Expand Up @@ -12,5 +12,5 @@ const fs = require('fs');
const pkg = JSON.parse(fs.readFileSync(__dirname + '/../package.json'));

if (pkg.version.indexOf('0.0.0') !== 0 && options.noUpdateNotifier !== true) {
require('update-notifier')({ pkg }).notify();
require('simple-update-notifier')({ pkg });
}
Loading

0 comments on commit 176c4a6

Please sign in to comment.