react-native-siren has critical security vulnerabilities

[wryczko-revolve]

Hi,

npm audit shows that one of the dependencies (react-native-siren 0.0.5), which is no longer maintained (last version was published 3 years ago) has critical vulnerabilities, because it depends on old version of apisause (2.1.6) and that depends on old version of axios (0.21.4). Would it be possible to replace react-native-siren with different library?

[SudoPlz]

hey there, why not just force it to use a more recent version of axios instead locally?

[wryczko-revolve]

I did that thanks. I was just wondering if you knew about that vulnerability

[SudoPlz]

No I wasn't aware of it, thanks for bringing it up.