A known security vulnerabilities in your dependencies.

[BBBOND]

Environment Info

Node version(node -v):
v9.2.0

Hexo and Plugin version(npm ls --depth 0):
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
├── [email protected]
└── [email protected]

For BUG

1. Github show a vulnerability alerts.
2. I push package-lock.json to the dependency.

For question

hexo(3.4.3) --> swig(1.4.2) --> uglify-js(2.4.24)

For feature request

[NoahDragon]

Thanks for point this out. We don't think this vulnerability applies to Hexo, unless using it as a server.

#2895