Skip to content

Conversation

@SEWeiTung
Copy link
Contributor

  1. wont => won't.
  2. Update 'semver' from 6.0.0 to 6.3.0.
  3. Update 'marked' from 0.6.2 to 0.7.0, this is a fixture for some known
    vulnerability. Another will be fixed until fixture: Upgration of 'marked' package metalsmith/markdown#40 is merged.

See more at this,

=== npm audit security report ===

Run npm install marked@0.7.0 to resolve 1 vulnerability

Low Regular Expression Denial of Service

Package marked

Dependency of marked

Path marked

More info https://nodesecurity.io/advisories/1076

                             Manual Review                                  
         Some vulnerabilities require your attention to resolve             
                                                                            
      Visit https://go.npm.me/audit-guide for additional guidance           

Low Regular Expression Denial of Service

Package marked

Patched in >=0.7.0

Dependency of metalsmith-markdown

Path metalsmith-markdown > marked

More info https://nodesecurity.io/advisories/1076

found 2 low severity vulnerabilities in 4559 scanned packages

1. wont => won't.
2. Update 'semver' from 6.0.0 to 6.3.0.
3. Update 'marked' from 0.6.2 to 0.7.0, this is a fixture for some known
vulnerability. Another will be fixed until
metalsmith/markdown#40 is merged.
@SEWeiTung SEWeiTung requested a review from Trott August 16, 2019 06:48
@MylesBorins
Copy link
Contributor

@MaledongGit in future can you open separate PRs for update dependencies as changing typos

Copy link
Contributor

@MylesBorins MylesBorins left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@MylesBorins MylesBorins merged commit 9f4efd8 into nodejs:master Aug 16, 2019
@SEWeiTung
Copy link
Contributor Author

@MylesBorins:Thanks, I see.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants