Github user ledara1 commented on a diff in the pull request:

    https://github.com/apache/thrift/pull/1175#discussion_r138406960
  
    --- Diff: package.json ---
    @@ -32,20 +32,22 @@
       },
       "main": "./lib/nodejs/lib/thrift",
       "engines": {
    -    "node": ">= 0.2.4"
    +    "node": ">= 0.12.0"
       },
       "dependencies": {
    -    "node-int64": "~0.3.0",
    -    "q": "1.0.x",
    -    "ws": "~0.4.32"
    +    "node-int64": "^0.4.0",
    +    "q": "^1.0.0",
    +    "ws": "^1.0.0"
    --- End diff --
    
    It should be  >=1.1.1. In this version most of security issues were fixed.


---

Reply via email to