You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently using music-metadata-browser (what an incredibly good project), I am facing a warning in Vite:
node_modules/file-type/core.js (1419:16) Use of evalin"node_modules/file-type/core.js" is strongly discouraged as it poses security risks and may cause issues with minification.
After seeking the reason of this warning, I saw that music-metadata-browser currently depends on "music-metadata": "^7.13.3", which depends on "file-type": "^16.5.4", which uses an eval in its code base.
Since "music-metadata": "8.1.4" depends on "file-type": "^18.2.1" (not uning eval anymore), I would suggest to update the dependencies to "music-metadata": "8.1.4";
I could help creating pull request if want me to.
Thanks.
The text was updated successfully, but these errors were encountered:
Hi,
Currently using music-metadata-browser (what an incredibly good project), I am facing a warning in Vite:
After seeking the reason of this warning, I saw that
music-metadata-browser
currently depends on"music-metadata": "^7.13.3"
, which depends on"file-type": "^16.5.4"
, which uses aneval
in its code base.Since
"music-metadata": "8.1.4"
depends on"file-type": "^18.2.1"
(not uningeval
anymore), I would suggest to update the dependencies to"music-metadata": "8.1.4"
;I could help creating pull request if want me to.
Thanks.
The text was updated successfully, but these errors were encountered: