2.0.3
[2.0.3] - 2022-03-14
Fixed:
- The
original
dependency (and therefore its transitive dependencyurl-parse
) had accidentally been included twice, once as a dependency ofjs-eventsource
and then again directly in the SDK'spackage.json
. This has been removed so there is no longer any reference to the vulnerableurl-parse
that was meant to be removed in 2.0.2. (Thanks, AlexHladin!)