Code Inspection: npm audit on nortissej/jess-aggr

[cdupuis]

graphql-code-generator:<0.18.2

• (error) Insecure Default Configuration Upgrade to version 0.18.2 or later.
  • graphql-code-generator:0.16.1:
  • @atomist/automation-client>graphql-code-generator

handlebars:<=4.0.13 || >=4.1.0 <4.1.2

• (error) Prototype Pollution For handlebars 4.1.x upgrade to 4.1.2 or later. For handlebars 4.0.x upgrade to 4.0.14 or later.
  • handlebars:4.0.12:
  • typedoc>handlebars

js-yaml:<3.13.0

• (warn) Denial of Service Upgrade to version 3.13.0.
  • js-yaml:3.12.0:
  • @atomist/automation-client>graphql-code-generator>graphql-config>js-yaml
  • @atomist/sdm-core>@kubernetes/client-node>js-yaml
  • @atomist/uhura>@kubernetes/client-node>js-yaml
  • tslint>js-yaml
  • js-yaml:3.12.1:
  • @atomist/automation-client>graphql-code-generator>js-yaml

js-yaml:<3.13.1

• (error) Code Injection Upgrade to version 3.13.1.
  • js-yaml:3.12.0:
  • @atomist/automation-client>graphql-code-generator>graphql-config>js-yaml
  • @atomist/sdm-core>@kubernetes/client-node>js-yaml
  • @atomist/uhura>@kubernetes/client-node>js-yaml
  • tslint>js-yaml
  • js-yaml:3.12.1:
  • @atomist/automation-client>graphql-code-generator>js-yaml

marked:>=0.3.14 <0.6.2

• (warn) Regular Expression Denial of Service Upgrade to version 0.6.2 or later.
  • marked:0.4.0:
  • typedoc>marked

static-eval:<=2.0.1

• (warn) Sandbox Breakout / Arbitrary Code Execution Upgrade to version 2.0.2 or later.
  • static-eval:2.0.0:
  • @atomist/sdm-core>@kubernetes/client-node>jsonpath>static-eval
  • @atomist/uhura>@kubernetes/client-node>jsonpath>static-eval

[atomist:code-inspection:nortissej/jess-aggr=@atomist/atomist-sdm]

[dansmithy]

Issue closed because branch nortissej/jess-aggr was deleted.

[cdupuis]

Issue closed because branch nortissej/jess-aggr was deleted.