Skip to content

UUID package end of life version #1666

Description

@CarlyG55

Problem:

This package is using a version of the UUID package that is end of life. v10 of the uuid package is no longer supported - for example only v11+ received an update for GHSA-w5hq-g745-h8pq

I don't think this vulnerability affects this package, but if there were further vulnerabilities, v10 would likely not receive updates

Solution:

Increase the major version of UUID or remove this package - I believe some repos have replaced the uuid package with a native crypto implementation - I've not looked at whether this would work here or not

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions