Next-plugins: @zeit/next-bundle-analyzer causes npm audit error

Created on 23 Apr 2019  路  2Comments  路  Source: vercel/next-plugins

next-bundle-analyzer depends on [email protected], but there is an XSS problem in that dependency that is only fixed in >=3.3.2.

https://www.npmjs.com/advisories/826

picture fabb
👍18

Most helpful comment

Any news on this? Been a while since this issue was opened..

picture chopstyc on 21 May 2019
👍2

All 2 comments

Any news on this? Been a while since this issue was opened..

chopstyc picture chopstyc on 21 May 2019
👍2

@zeit/next-bundle-analyzer seems to have been deprecated in favor of @next/bundle-analyzer. 8.1.1-canary.44 of that package has an updated webpack-bundle-analyzer.

https://github.com/zeit/next.js/blob/9fa1101c7c7d6c81166c6565271296f1ebc3bf7d/packages/next-bundle-analyzer/package.json

npm install --save-dev @next/bundle-analyzer@canary

Note that the new package works slightly differently.

lydell picture lydell on 5 Jun 2019
👀1
Was this page helpful?
0 / 5 - 0 ratings

Related issues

mitaxe picture mitaxe  路  4Comments
tim-phillips picture tim-phillips  路  4Comments
antonioOrtiz picture antonioOrtiz  路  4Comments
popuguytheparrot picture popuguytheparrot  路  4Comments
derindutz picture derindutz  路  3Comments