Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[MAINTENANCE] Audit javascript package dependabot alerts for use in Gulp build tool vs. live app #663

Open
adambuttrick opened this issue Jul 2, 2024 · 0 comments
Open

[MAINTENANCE] Audit javascript package dependabot alerts for use in Gulp build tool vs. live app #663

adambuttrick opened this issue Jul 2, 2024 · 0 comments
Labels
maintenance Routine or one-off maintenance or clean-up task

Comments

@adambuttrick
Copy link

adambuttrick commented Jul 2, 2024 •
edited
Loading

Per our discussion with Joel, we should review dependabot alerts for any javascript package vulnerabilities and determine whether they are limited to our build tool or in the application itself. Anything in the application needs to be treated with higher priority, while build packages are less important, short term.
@adambuttrick adambuttrick changed the title [MAINTENANCE] Audit javascipt package dependabot alerts for use in Gulp build tool vs. live app [MAINTENANCE] Audit javascript package dependabot alerts for use in Gulp build tool vs. live app Jul 2, 2024
@adambuttrick adambuttrick added the maintenance Routine or one-off maintenance or clean-up task label Jul 2, 2024
This was referenced Jul 8, 2024
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
maintenance Routine or one-off maintenance or clean-up task
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@adambuttrick