markdown-it dependency vulnerability

[dsngeu]

react-native-markdown-display@7.0.2
└── markdown-it@10.0.0 (vulnerable version)

[dotnich-io]

@dsngeu has overriding the version of markdown-it worked for you?

[wedelgaard]

@dotnich-io @dsngeu Worked for me overriding markdown-it in package.json. Didn't seem to break anything 😅

  "overrides": {
    "markdown-it": "14.1.0"
  },

[mlachman]

@dotnich-io @dsngeu Worked for me overriding markdown-it in package.json. Didn't seem to break anything 😅

  "overrides": {
    "markdown-it": "14.1.0"
  },

You should add the package in the override:

  "overrides": {
    "react-native-markdown-display": {
      "markdown-it": "14.1.0"
    }
  }

[DarkSorrow]

Well i forked this repo and removed unmaintained package. If you guys want to try or if some see some things that dont work here is the link

https://www.npmjs.com/package/@novastera-oss/react-native-markdown-display

I migrated all to typescript too