Fix 2 npm dependencies

[atomist[bot]]

This pull request fixes all 2 moderate security vulnerabilities open on fdf7586.

npm audit fix updated the following npm dependencies:

• jszip 3.6.0 > 3.7.1
• path-parse 1.0.6 > 1.0.7

---

Fixed vulnerabilities

Following security vulnerabilities are fixed:

jszip

Prototype Pollution Upgrade to version 3.7.0 or later moderate · <3.7.0 · CVE-2021-23413 · automatic fix available

jszip@3.6.0 · 1 vulnerable path

@atomist/skill > jszip

---

path-parse

Regular Expression Denial of Service in path-parse Upgrade to version 1.0.7 or later moderate · <1.0.7 · CVE-2021-23343 · automatic fix available

path-parse@1.0.6 · 1 vulnerable path

@kubernetes/client-node > shelljs > rechoir > resolve > path-parse

---

File changed:

• package-lock.json

---

_{atomist/npm-vulnerability-scanner-skill · Configure}

[atomist[bot]]

Pull request auto merged:

• No reviews
• 1 successful check