Assess the issue, and weigh up risk against effort. If the risk is high, you could remove the dependency.
Both Snyk CLI and the GitHub integration allow you to ignore the vulnerability for 30 days.
What if there is no upgrade or patch available?
Comments
0 comments
Please sign in to leave a comment.