[Snyk] Upgrade uport-credentials from 1.1.0-alpha-6 to 1.3.5 #1

snyk-bot · 2021-06-25T00:54:21Z

Snyk has created this PR to upgrade uport-credentials from 1.1.0-alpha-6 to 1.3.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 35 versions ahead of your current version.
The recommended version was released 9 months ago, on 2020-09-25.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090602	479/1000 Why? Has a fix available, CVSS 5.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090601	479/1000 Why? Has a fix available, CVSS 5.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090600	479/1000 Why? Has a fix available, CVSS 5.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090599	479/1000 Why? Has a fix available, CVSS 5.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:validator:20180218	479/1000 Why? Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: uport-credentials

1.3.5 - 2020-09-25
1.3.5 (2020-09-25)

Bug Fixes
- deps: update dependency ethr-did-resolver to v3 (#267) (094bb57), closes #268
1.3.4 - 2020-08-07
1.3.4 (2020-08-07)

Bug Fixes
- deps: update dependency elliptic to v6.5.3 [security] (#241) (b601c62)
- make ClaimSpec.user_info and VerifiableClaimSpec.iss optional (#251) (d598623), closes #250
1.3.3 - 2020-06-11
1.3.3 (2020-06-11)

Bug Fixes
- deps: update dependency did-resolver to v2 (#204) (68f41e7)
1.3.2 - 2020-06-11
1.3.2 (2020-06-11)

Bug Fixes
- deps: update dependency did-jwt-vc to ^0.2.0 (#203) (bfc2981)
1.3.1 - 2020-06-09
1.3.1 (2020-06-09)

Bug Fixes
- build: automatic release (b9847b9)
1.3.0 - 2020-02-07
[release] 1.3.0
- feat: add support for W3C verifiable credentials
- BREAKING: require a configuration for resolvers
1.2.3 - 2019-10-08
Fixes exports to allow Credentials to be used as a type ( #185 )
1.2.3-dev.0 - 2019-07-01
1.2.2 - 2019-06-19
- Upgrade did-jwt to v0.2.0 (typescript)
1.2.2-alpha.1 - 2019-06-14
1.2.2-alpha.0 - 2019-06-05
1.2.1 - 2019-04-26
- Added support for rexp param to specify expiration period for claim signed by verification signature request
1.2.0 - 2019-04-25
- Converted to typescript
- Allow developers to specify more detailed conditions and information within a selective disclosure request using the new Verifiable Claims Spec
1.2.0-alpha6 - 2019-02-23
1.2.0-alpha5 - 2019-02-23
1.2.0-alpha4 - 2019-02-23
1.2.0-alpha3 - 2019-01-21
1.2.0-alpha2 - 2019-01-20
1.2.0-alpha1 - 2019-01-20
1.1.8-dev.2 - 2019-04-26
1.1.8-dev.1 - 2019-04-26
1.1.8-dev.0 - 2019-04-24
1.1.7 - 2019-04-15
1.1.7-alpha.1 - 2019-04-12
1.1.6 - 2019-04-10
1.1.5 - 2019-03-27
1.1.4 - 2019-02-04
1.1.3 - 2019-01-21
1.1.2 - 2019-01-17
1.1.1-alpha-2 - 2019-01-16
1.1.1-alpha-1 - 2019-01-15
1.1.0 - 2018-12-18
1.1.0-rc.2 - 2018-12-12
1.1.0-rc.1 - 2018-12-12
1.1.0-rc.0 - 2018-12-10
1.1.0-alpha-6 - 2018-12-22