Skip to content

Time to drop sync-request? #103

@javiertury

Description

@javiertury

Is it time to drop sync-request from this project?

Recently github notified me about a vulnerability introduced by markdown-magic through sync-request (which has not been updated in 6 years), that ultimately came from an ancient form-data 2. 5 version. It was nothing to worry about because, as far as I know, markdown-magic doesn't even use sync-request. The only file making a reference is packages/core/src/utils/remoteRequest.js but remoteRequestSync does not seem to be used anywhere.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions