Control: tags -1 + pending Le 05/12/2020 à 19:19, Jonas Smedegaard a écrit : > Package: node-cheerio > Version: 0.22.0-2 > Severity: normal > > Hi, > > Thanks for packaging Cheerio. > > Currently packaged release is the latest upstream stable release, > but was released 4 years ago . 1.0rc1 was released 3.5 years ago > and 1.0rc3 was released 1.5 years ago. > > Please consider updating to 1.0rc3 (in preparation for 1.0rc4 > which might soon be released, judging from issue tracker chatter). > > Concretely, 1.0rc3 is needed for matrix-hydrogen that I am preparing, > but I notice that it is also preferred for node-dom-serializer > (even for the outdated 0.2.2 that we carry in Debian), > and some issue tracker chatter seems to indicate that there are also > security bugs fixed along the way of those 4 years of progress. > > Raising severity from wishlist to normal due to possible security risk. > > - Jonas
You're absolutely right, built and pushed ;-)