Find semver versions in a string: `unicorn v1.2.3` โ `1.2.3`
by sindresorhusJavaScript
Last 12 weeks ยท 0 commits
4 of 6 standards met
Repository: sindresorhus/find-versions. Description: Find semver versions in a string: `unicorn v1.2.3` โ `1.2.3` Stars: 46, Forks: 7. Primary language: JavaScript. Languages: JavaScript (92.5%), TypeScript (7.5%). License: MIT. Latest release: v6.0.0 (1y ago). Open PRs: 0, open issues: 0. Last activity: 1y ago. Community health: 85%. Top contributors: sindresorhus, kevva, BendingBender, jimmywarting, watson.
Subject of the issue find-versions@3.2.0 requires semver-regex@2.0.0, which has a security problem (see: SNYK-JS-SEMVERREGEX-1047770): I do not know if this vulnerability actually affects find-versions, but it will show up in security reports about dependencies. Since a large number of developers still use find-versions@3.2.\**(1,762,377 downloads per week), is there any posibility that you could release an update version for 3.2.\ (ie 3.2.1) that introduces a patched version(>=3.1.2) of semver-regex? In find-versions@3.2.1, maybe you can perform the following update: where semver-regex@3.1.2(>=3.1.2) has fixed the vulnerability SNYK-JS-SEMVERREGEX-1047770.