From 614944b6fbdf22ca9c2b67aa7522554534021518 Mon Sep 17 00:00:00 2001 From: Tristan Edwards Date: Tue, 27 Nov 2018 19:55:19 +0100 Subject: [PATCH 1/2] Remove flatmap-stream vulnerability An older version of `npm-run-all` is dependant on `flatmap-stream` which was hijacked by a malicious maintainer (see: https://github.com/mysticatea/npm-run-all/commit/57d72eb98c2ce108f07d2a2cf1b44d57f08ec3ca#commitcomment-31468478). Right now, this package won't even install since NPM has removed the infected dependency: https://www.npmjs.com/package/flatmap-stream (leads to 404) I've bumped the version of `npm-run-all` to `4.1.5` which removes the dependency on `flatmap-stream`. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index d17e153..eab788a 100644 --- a/package.json +++ b/package.json @@ -26,7 +26,7 @@ "homepage": "https://github.com", "dependencies": { "deep-extend": "^0.4.1", - "npm-run-all": "^4.1.1", + "npm-run-all": "^4.1.5", "prop-types": "^15.6.0", "react": "^16.2.0", "react-dom": "^16.2.0" From dd911b1f909256ddf062252d647aa7ed002f1252 Mon Sep 17 00:00:00 2001 From: Tristan Edwards Date: Tue, 27 Nov 2018 20:02:17 +0100 Subject: [PATCH 2/2] Signed-off-by: Tristan Edwards Signed-off-by: Tristan Edwards --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 1cb146f..d9a2d8d 100644 --- a/README.md +++ b/README.md @@ -78,8 +78,8 @@ values: | ratio | width / height | | width | cropper frame width | | height | cropper frame height | -| originX | cropper original position(x axis), accroding to image left| -| originY | cropper original position(Y axis), accroding to image top| +| originX | cropper original position(x axis), accroding to image left | +| originY | cropper original position(Y axis), accroding to image top | | fixedRatio | turn on/off fixed ratio (bool default true) | | allowNewSelection | allow user to create a new selection instead of reusing initial selection (bool default true) | | styles | specify styles to override inline styles |