SnowdogApps / magento2-alpaca-components

Components library of Alpaca design system crafted for ecommerce
https://alpaca-components.now.sh/
MIT License
46 stars 10 forks source link

[Snyk] Upgrade @frctl/fractal from 1.1.7 to 1.3.0 #512

Closed snyk-bot closed 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to upgrade @frctl/fractal from 1.1.7 to 1.3.0.

merge advice

✨What is Merge Advice? We check thousands of dependency upgrade pull requests and CI tests every day to see which upgrades were successfully merged. After crunching this data, we give a recommendation on how safe we think the change is for you to merge without causing issues. Learn more, and share your feedback to help improve this feature. πŸ™

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-451540
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-174116
No Known Exploit
Denial of Service (DoS)
SNYK-JS-AXIOS-174505
No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:braces:20180219
Proof of Concept

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

πŸ›  Adjust upgrade PR settings

πŸ”• Ignore this dependency or unsubscribe from future upgrade PRs

vercel[bot] commented 4 years ago

This pull request is being automatically deployed with Vercel (learn more). To see the status of your deployment, click below or on the icon next to each commit.

πŸ” Inspect: https://vercel.com/snowdog/magento2-alpaca-components/31ax7ng35 βœ… Preview: https://magento2-alpac-git-snyk-upgrade-3bc9fad8857cd9f4f66a5ec9-c12e35.snowdog1.now.sh