npm audit report 29 vulnerabilities

[loynoir]

Steps to reproduce

Prepare

git clone https://github.com/jquery/esprima .
npm install

npm audit

Expected output

found 0 vulnerabilities

Actual output

29 vulnerabilities (11 low, 8 moderate, 7 high, 3 critical)

Relevant references

[ariya]

Thank you for the checks @loynoir!

These are all transitive dependencies of the devDependencies, i.e. the tools used for development. They are not affecting the run-time safety of Esprima (when being used a library). Any PRs to update/improve those tools are always welcomed.

I'm closing this for now unless there is a strong evident that the run-time behavior of Esprima is affected.