From 6a1b9cf0f03d64e1ae25131b1ea73c3d3d04dc55 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 23 Mar 2022 17:03:55 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 --- package-lock.json | 36 ++++++++++++++++++++++-------------- package.json | 4 ++-- 2 files changed, 24 insertions(+), 16 deletions(-) mode change 100755 => 100644 package.json diff --git a/package-lock.json b/package-lock.json index 081d9b6..31cd57e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1321,9 +1321,9 @@ } }, "minimist": { - "version": "1.2.5", - "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz", - "integrity": "sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==" + "version": "1.2.6", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz", + "integrity": "sha512-Jsjnk4bw3YJqYzbdyBiNsPWHPfO++UGG749Cxs6peCu5Xg4nrena6OVxOYxrQTqww0Jmwt+Ref8rggumkTLz9Q==" }, "minipass": { "version": "2.9.0", @@ -1343,18 +1343,11 @@ } }, "mkdirp": { - "version": "0.5.1", - "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz", - "integrity": "sha1-MAV0OOrGz3+MR2fzhkjWaX11yQM=", + "version": "0.5.2", + "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.2.tgz", + "integrity": "sha512-jczt4BrifxW743wRHJ05AnqIF52sDrHCAjTO66cFQStG1/jHMLFSGdAa3Rec21jdEObaPugcXfbh6Ammt2VQsw==", "requires": { - "minimist": "0.0.8" - }, - "dependencies": { - "minimist": { - "version": "0.0.8", - "resolved": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz", - "integrity": "sha1-hX/Kv8M5fSYluCKCYuhqp6ARsF0=" - } + "minimist": "^1.2.5" } }, "mocha": { @@ -1384,6 +1377,21 @@ "requires": { "ms": "2.0.0" } + }, + "minimist": { + "version": "0.0.8", + "resolved": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz", + "integrity": "sha1-hX/Kv8M5fSYluCKCYuhqp6ARsF0=", + "dev": true + }, + "mkdirp": { + "version": "0.5.1", + "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz", + "integrity": "sha1-MAV0OOrGz3+MR2fzhkjWaX11yQM=", + "dev": true, + "requires": { + "minimist": "0.0.8" + } } } }, diff --git a/package.json b/package.json old mode 100755 new mode 100644 index b948f1f..f911779 --- a/package.json +++ b/package.json @@ -17,8 +17,8 @@ "jsonfile": "^5.0.0", "lodash": ">=4.17.12", "mathjs": "^5.3.1", - "minimist": "^1.2.5", - "mkdirp": "^0.5.1", + "minimist": "^1.2.6", + "mkdirp": "^0.5.2", "moment": "^2.22.2", "multer": "^1.4.1", "request": "^2.88.0",