#825·recompose

fbjs dependency still present in lock file

Author: mmarchettCreated Feb 2, 2021Updated Oct 25, 2021

When I install recompose, it keeps downloading as a dependency fbjs, which in turn brings as a dependency ua-parser-js, which has a Prototype Pollution vulnerability.