Code Inspection: npm audit on repo-sync-45

[atomist-bot]

fstream:<1.0.12

• (error) Arbitrary File Overwrite Upgrade to version 1.0.12 or later.
  • fstream:1.0.11:
  • @atomist/sdm-core>npm>libcipm>npm-lifecycle>node-gyp>fstream
  • @atomist/sdm-core>npm>libcipm>npm-lifecycle>node-gyp>tar>fstream
  • @atomist/sdm-core>npm>libnpm>npm-lifecycle>node-gyp>fstream
  • @atomist/sdm-core>npm>libnpm>npm-lifecycle>node-gyp>tar>fstream
  • @atomist/sdm-core>npm>node-gyp>fstream
  • @atomist/sdm-core>npm>node-gyp>tar>fstream
  • @atomist/sdm-core>npm>npm-lifecycle>node-gyp>fstream
  • @atomist/sdm-core>npm>npm-lifecycle>node-gyp>tar>fstream

graphql-code-generator:>=0

• (error) Insecure Default Configuration No fix is currently available. Consider using an alternative module until a fix is made available.
  • graphql-code-generator:0.16.1:
  • @atomist/automation-client>graphql-code-generator

js-yaml:<3.13.0

• (warn) Denial of Service Upgrade to version 3.13.0.
  • js-yaml:3.12.1:
  • @atomist/automation-client>graphql-code-generator>js-yaml

js-yaml:<3.13.1

• (error) Code Injection Upgrade to version 3.13.1.
  • js-yaml:3.12.1:
  • @atomist/automation-client>graphql-code-generator>js-yaml

marked:>=0.3.14 <0.6.2

• (warn) Regular Expression Denial of Service Upgrade to version 0.6.2 or later.
  • marked:0.4.0:
  • typedoc>marked

tar:<2.2.2 || >=3.0.0 <4.4.2

• (error) Arbitrary File Overwrite For tar 4.x, upgrade to version 4.4.2 or later. For tar 2.x, upgrade to version 2.2.2 or later.
  • tar:2.2.1:
  • @atomist/sdm-core>npm>libcipm>npm-lifecycle>node-gyp>tar
  • @atomist/sdm-core>npm>libnpm>npm-lifecycle>node-gyp>tar
  • @atomist/sdm-core>npm>node-gyp>tar
  • @atomist/sdm-core>npm>npm-lifecycle>node-gyp>tar

[atomist:code-inspection:repo-sync-45=@atomist/atomist-sdm]

[cdupuis]

Issue closed because last code inspection problem was fixed by @ddgenome when they pushed 34267e2.

[cdupuis]

Issue closed because last code inspection problem was fixed by @ddgenome when they pushed 5b59ddf.

[cdupuis]

Issue closed because last code inspection problem was fixed by @ddgenome when they pushed d063275.

[cdupuis]

Issue closed because last code inspection problem was fixed by @ddgenome when they pushed 828f1cb.

[cdupuis]

Issue closed because branch repo-sync-45 was deleted.