vulnerable libraries (jQuery) about imagine

[DanielRuf]

Do you mean the file /docs/API/API/js/jquery-1.11.1.min.js ?

Correct.

We've got a report from WhiteSource / Mend, which marked the imagine/imagine library as vulnerable. I guess this is a false positive then.

Because like you say, there is no docs folder in the published files:

[DanielRuf]

According to the search results (I didn't check that in detail) the jQuery files are only part of the documentation files and not used in the PHP code.

So I guess there is no risk?

https://github.com/search?q=repo%3Aphp-imagine%2FImagine%20jquery&type=code

[ausi]

Do you mean the file /docs/API/API/js/jquery-1.11.1.min.js ?

This should not be a problem as the /docs folder does not get shipped if installed with Composer via archive (the default I think).

Imagine/.gitattributes

Line 2 in c4ca147

/docs export-ignore

[DanielRuf]

No docs folder anywhere. Closing as resolved.

Thanks for the swift reply.