Vulnerable version of moment referenced by Javascript unit tests

[seanprince]

HI there

Our open source vulnerability scanning software (=Mend) is flagging this package as vulnerable because the Javascript unit tests refer to a vulnerable version of moment. Could you update to moment >= v2.29.4, please?

[tdewolff]

Thanks Sean for the heads-up. I've updated sample_moment.js to the latest version. It has increased almost two-fold since the older version in file size...!

[seanprince]

Nice one - thanks.

…

On Tue, 21 May 2024 at 13:25, Taco de Wolff ***@***.***> wrote: Closed #702 <#702> as completed via 6c73001 <6c73001> . — Reply to this email directly, view it on GitHub <#702 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABZPC7BGSS7DVEGNJHT43JTZDM4K3AVCNFSM6AAAAABH4LLEUSVHI2DSMVQWIX3LMV45UABCJFZXG5LFIV3GK3TUJZXXI2LGNFRWC5DJN5XDWMJSHA3TSNBTGAZDKMY> . You are receiving this because you authored the thread.Message ID: ***@***.***>