search

TheBrainFamily / jest-runner-cypress

poc for jest-runner-cypress
9 stars 2 forks source link

Update dependencies with critical security flaws #2

Open dmwelch opened 4 years ago

dmwelch commented 4 years ago

Hi @lgandecki, I was installing the package today and noticed that there is a critical alert from npm audit for create-jest-runner-with-skip:

│ Critical │ Command Injection │ │ Package │ growl │ │ Patched in │ >=1.10.2 │ │ Dependency of │ create-jest-runner-with-skip │ │ Path │ create-jest-runner-with-skip > mocha > growl │ │ More info │ https://npmjs.com/advisories/146 │

I noticed also the create-jest-runner-with-skip on NPM points to the repo for create-jest-runner. Would it be possible to use this as a replacement? I'd be happy to make a PR for said changes.

Cheers!

lgandecki commented 4 years ago

Please give it a try and let me know how that works. I created that simple fork because it was missing.. a skip? :) I can't really remember. I'd be happy to revisit this. Maybe things got a bit faster in the last two years (woow, time flies!)

dmwelch commented 4 years ago

3