Skip to content

Commit 176c4a6

Browse files
authored
fix: Replace update notifier with simplified deps (#2033)
Closes #1961 Closes #2028 - Fixes security issue with got (CVE-2022-33987) - Replace update-notifier with simple-update-notifier which does the same thing but has one dependency (semver) rather than several - Same caching settings as update-notifier Congratulations and thanks to @alexbrazier 👏 🥇 ❤️
1 parent 8db5f7c commit 176c4a6

File tree

3 files changed

+61
-480
lines changed

3 files changed

+61
-480
lines changed

bin/nodemon.js

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,5 +12,5 @@ const fs = require('fs');
1212
const pkg = JSON.parse(fs.readFileSync(__dirname + '/../package.json'));
1313

1414
if (pkg.version.indexOf('0.0.0') !== 0 && options.noUpdateNotifier !== true) {
15-
require('update-notifier')({ pkg }).notify();
15+
require('simple-update-notifier')({ pkg });
1616
}

0 commit comments

Comments
 (0)