Please release xml2js 0.4.24 including the security fix of 0.5.0 - important about node-xml2js HOT 4 CLOSED

Yes, in this case it works but that's not true of all the packages that depend on xml2js unfortunately.

from node-xml2js.

I don't think I can do that because instead of keeping some packages at old versions (which can be overridden using npm and depending on the package might work) it would potentially break every single dependency.

So the best I can suggest is to either override it (if possible, given some changes are indeed backwards incompatible) or fork parse-bmfont-xml and update the code.

from node-xml2js.

@Leonidas-from-XIV I used an override in package.json, which is working just fine:

  "overrides": {
    "jimp": {
      "xml2js": "^0.5.0"
    }
  }

from node-xml2js.

Fixed in mattdesl/parse-bmfont-xml#4

from node-xml2js.