Closed snyk-bot closed 1 year ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
overtaken by #58
fippo
commented
1 year ago fippo
commented
1 year ago
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
SNYK-JS-HOSTEDGITINFO-1088355
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: normalize-package-data
The new version differs by 10 commits.- e584704 3.0.0
- 6899b0c fix: broken tests w/ latest hosted-git-info
- 40d07df hosted-git-info@3.0.6
- e938119 chore: update engines
- 7e70f63 resolve@1.17.0
- 0ba7f91 semver@7.3.2
- 30afb71 chore: remove async dev dep
- db9c672 tap@14.10.8
- cc89759 chore: remove underscore dev dep
- b224ba1 chore: update to package-lock v2
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic