ant-design Antd uses copy-to-clipboard which contains vulnerabilities

bksxznpy 于 5个月前发布在其他

关注(0)|答案(4)|浏览(58)

I have searched the issues of this repository and believe that this is not a duplicate.

What problem does this feature solve?

Antd uses copy-to-clipboard. The latest version of copy-to-clipboard contains some vulnerabilities according to "npm audit":
16 vulnerabilities (1 low, 4 moderate, 6 high, 5 critical)

I'm certainly no expert with this but it appears that the vulnerabilities are related to packages that need upgrading to newer versions (in copy-to-clipboard). However copy-to-clipboard doesn't appear active or at least there hasn't been an updated version in well over a year. I'm wondering if there are antd plans to move to a package that is comparable to copy-to-clipboard but one that is active. My security scan doesn't like the vulnerabilities found in this package that antd uses.

What does the proposed API look like?

No API. But hopefully the inactive copy-to-clipboard can be replaced with a project that is active.

ant-design

来源：https://github.com/ant-design/ant-design/issues/34203

4条答案

按热度按时间

68bkxrlz1#

Could you recommend another copy library?

赞(0）回复(0）举报 5个月前

qnyhuwrf2#

Hello @matsamuel2018. We totally like your proposal/feedback, welcome to send us a Pull Request for it. Please send your Pull Request to proper branch (feature branch for the new feature, master for bugfix and other changes), fill the Pull Request Template here, provide changelog/TypeScript/documentation/test cases if needed and make sure CI passed, we will review it soon. We appreciate your effort in advance and looking forward to your contribution!

你好 @matsamuel2018，我们完全同意你的提议/反馈，欢迎直接在此仓库创建一个 Pull Request 来解决这个问题。请将 Pull Request 发到正确的分支（新特性发到 feature 分支，其他发到 master 分支），务必填写 Pull Request 内的预设模板，提供改动所需相应的 changelog、TypeScript 定义、测试用例、文档等，并确保 CI 通过，我们会尽快进行 Review，提前感谢和期待您的贡献。