http-proxy-agent is on version 8 now; can that be updated to avoid multiple versions of package for consuming codebases, security issues, etc.?
security example: GHSA-vpq2-c234-7xj6 (via http-proxy-agent@5.0.0 which pulls in @tootallnate/once@2.0.0)
It looks like this is partially resolved but not completely:
- "teeny-request@10" now uses version 7 (which is closer to 8 than 5 is):
|
"http-proxy-agent": "^7.0.0", |
- "google-cloud/gapic-generator" still uses "teeny-request@9" but if it were updated to use "teeny-request@10" then it too and the generated packages would all be udpated
http-proxy-agent is on version 8 now; can that be updated to avoid multiple versions of package for consuming codebases, security issues, etc.?
security example: GHSA-vpq2-c234-7xj6 (via http-proxy-agent@5.0.0 which pulls in @tootallnate/once@2.0.0)
It looks like this is partially resolved but not completely:
google-cloud-node/core/packages/teeny-request/package.json
Line 45 in 9fc552c