The version of the vega package bundled in splink is 5.21.0 (https://github.com/moj-analytical-services/splink/blob/master/splink/internals/files/external_js/vega%405.21.0). This version of vega ha...
The version of jQuery UI bundled in https://github.com/rstudio/shiny/tree/main/inst/www/shared/jqueryui is 1.13.2.
According to Sonatype, this version is vulnerable to prototype pollution (SONATYP...
Hi @JanMarvin,
Thanks for the quick response!
The pull request states the following:
> open issues are not being actively worked on and pull requests may not be checked.
That's why I op...
There is an [open PR](https://github.com/ycphs/openxlsx/pull/489/files), by @JanMarvin (who seems to be the maintainer of both openxlsx and openxlsx2), with a note that describes openxlsx as being ...