the minimist v1.2.5 package has critical dependency issue. This needs to be updated to 1.2.6

[michael-roewin]

Findings

• When doing npm audit, a critical vulnerability issue that's related to the cordova diagnostic plugin appears.

Screenshots

[dvag-lukas-rybacki]

@michael-roewin already fixed in #464

[michael-roewin]

thanks so much @dvag-lukas-rybacki . Are you going to create a new tag for this fix?

[dvag-lukas-rybacki]

@michael-roewin i am also waiting for a new release @dpa99c

[peitschie]

As an interim fix, you can install the dependency directly from github instead (there appears to be no compile steps needed here):

npm install --save https://github.com/dpa99c/cordova-diagnostic-plugin.git

But definitely looking forward to a new release 😸

[dvag-lukas-rybacki]

Thats true @peitschie . Thanks for the alternative idea and also looking forward to new release though 😄

[dpa99c]

This has been fixed in the major version [email protected] which has just been released to npm.
Please re-test with this new version and feedback any issues.