Code Inspection: npm audit on fingerprint - Githubissues

atomist / sdm-pack-analysis

Extension pack for an Atomist SDM to analyze projects and extract technology stacks

Apache License 2.0

0 stars 0 forks source link

Code Inspection: npm audit on fingerprint #24

Closed atomist-bot closed 5 years ago

atomist-bot commented 5 years ago

handlebars:<=4.0.13 || >=4.1.0 <4.1.2

(error) Prototype Pollution For handlebars 4.1.x upgrade to 4.1.2 or later. For handlebars 4.0.x upgrade to 4.0.14 or later.
- handlebars:4.1.1:
- typedoc>@types/handlebars>handlebars
- typedoc>handlebars

js-yaml:<3.13.0

(warn) Denial of Service Upgrade to version 3.13.0.
- js-yaml:3.12.2:
- @atomist/automation-client>graphql-code-generator>graphql-config>js-yaml
- @atomist/sdm-core>@kubernetes/client-node>js-yaml
- tslint>js-yaml
- js-yaml:3.12.1:
- @atomist/automation-client>graphql-code-generator>js-yaml

js-yaml:<3.13.1

(error) Code Injection Upgrade to version 3.13.1.
- js-yaml:3.12.2:
- @atomist/automation-client>graphql-code-generator>graphql-config>js-yaml
- @atomist/sdm-core>@kubernetes/client-node>js-yaml
- tslint>js-yaml
- js-yaml:3.12.1:
- @atomist/automation-client>graphql-code-generator>js-yaml

marked:>=0.3.14 <0.6.2

(warn) Regular Expression Denial of Service Upgrade to version 0.6.2 or later.
- marked:0.4.0:
- typedoc>marked

[atomist:code-inspection:fingerprint=@atomist/atomist-sdm]

atomist-bot commented 5 years ago

Issue closed because branch fingerprint was deleted.