Code Inspection: npm audit on fix-gradle-version-parsing - Githubissues

atomist / sdm-pack-spring

Extension Pack for an Atomist SDM to automate delivery of Spring and Spring Boot applications

Apache License 2.0

11 stars 0 forks source link

Code Inspection: npm audit on fix-gradle-version-parsing #135

Closed atomist-bot closed 5 years ago

atomist-bot commented 5 years ago

js-yaml:<3.13.0

(warn) Denial of Service Upgrade to version 3.13.0.
- js-yaml:3.12.1:
- @atomist/automation-client>graphql-code-generator>js-yaml

marked:>=0.3.14 <0.6.2

(warn) Regular Expression Denial of Service Upgrade to version 0.6.2 or later.
- marked:0.4.0:
- typedoc>marked

tar:<4.4.2

(error) Arbitrary File Overwrite Upgrade to version 4.4.2 or later.
- tar:2.2.1:
- @atomist/sdm-core>npm>libcipm>npm-lifecycle>node-gyp>tar
- @atomist/sdm-core>npm>libnpm>npm-lifecycle>node-gyp>tar
- @atomist/sdm-core>npm>node-gyp>tar
- @atomist/sdm-core>npm>npm-lifecycle>node-gyp>tar

[atomist:code-inspection:fix-gradle-version-parsing=@atomist/atomist-sdm]

atomist-bot commented 5 years ago

Issue closed because branch fix-gradle-version-parsing was deleted.