Please upgrade your google-auth-library for security reasons

[FranciscoG]

https://snyk.io/test/npm/google-spreadsheet/2.0.4?severity=high&severity=medium&severity=low

MEDIUM SEVERITY

Uninitialized Memory Exposure

Vulnerable module: tunnel-agent
Introduced through: google-spreadsheet@2.0.4 › google-auth-library@0.9.10 › request@2.74.0 › tunnel-agent@0.4.3
Remediation: Upgrade to google-auth-library@0.10.0.

[josh-renton]

+1

[jpike88]

@theoephraim this is extremely important, can you please say whether or not you're going to attend to this? Otherwise I'm going to fork

[jpike88]

#208

@theoephraim I made this easy for you, all you have to do is npm publish

[josh-renton]

Isn't it worth moving to v 1.x ? Does the move to 0.10.0 actually cover all the security issues with google-auth-lib?

…

On Mon, 4 Jun 2018 at 11:35, Josh Pike ***@***.***> wrote: #208 <#208> @theoephraim <https://github.com/theoephraim> I made this easy for you, all you have to do is npm publish — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#205 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIWlcO4CiUSDz9Tb30F7hYoeg8gwfLHgks5t5KrvgaJpZM4TuDA6> .

[jpike88]

@theoephraim you're active on Github... can you just pass contributor/npm status onto someone who will put in the 5 mins of effort to publish an update?

[theoephraim]

My bad guys. For some reason I had notification emails off.
I will fix this ASAP.

[jpike88]

you're a legend, thanks!

[FranciscoG]

no worries!! Thanks for updating.

[josh-renton]

Thanks so much for this.