Re:What NPM should do to stop a new colors attack
by watwut on Tuesday January 11, 2022 @01:23AM
(#29888242)
You don't have to wait till that lib updates. You update version yourself and overwrite it.
Second, log4j is bad examples. Libraries don't pin that at all and people report bug is they do. Libraries are supposed to depend on logging api in general and end project decides whether use log4j or slfj.
Second, log4j is bad examples. Libraries don't pin that at all and people report bug is they do. Libraries are supposed to depend on logging api in general and end project decides whether use log4j or slfj.