Skip to content
This repository was archived by the owner on Apr 18, 2023. It is now read-only.

Fix just-extend vulnerability#37

Closed
jdjkelly wants to merge 1 commit intostacks-archive:masterfrom
jdjkelly:master
Closed

Fix just-extend vulnerability#37
jdjkelly wants to merge 1 commit intostacks-archive:masterfrom
jdjkelly:master

Conversation

@jdjkelly
Copy link
Copy Markdown

npm audit results gave me this:

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ just-extend                                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ yeoman-test [dev]                                            │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ yeoman-test > sinon > nise > just-extend                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/780                             │
└───────────────┴──────────────────────────────────────────────────────────────┘

Used npm version 6.8.0 to run the npm audit fix command to automatically resolve - it added additional optional: true parameters to several dependencies - this may be related to npm/npm#17722

@zone117x
Copy link
Copy Markdown
Contributor

zone117x commented Aug 6, 2019

Latest dev branch currently passes npm audit

@zone117x zone117x closed this Aug 6, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants