Code Inspection: npm audit on master

atomist-bot commented 5 years ago

axios:<0.18.1

(warn) Denial of Service Upgrade to 0.18.1 or later.
- axios:0.18.0:
- @atomist/sdm-pack-issue>axios

js-yaml:<3.13.1

(error) Code Injection Upgrade to version 3.13.1.
- js-yaml:3.13.0:
- @atomist/sdm-pack-k8s>@kubernetes/client-node>js-yaml
- @kubernetes/client-node>js-yaml

lodash:<4.17.12

(error) Prototype Pollution Update to version 4.17.12 or later. - CVE-2019-10744
- lodash:4.17.11:
- @atomist/automation-client>@atomist/tree-path>lodash
- @atomist/sdm-pack-docker>@atomist/tree-path>lodash
- @atomist/sdm-pack-spring>@atomist/tree-path>lodash
- @atomist/automation-client>@graphql-codegen/core>graphql-toolkit>graphql-import>lodash
- @atomist/automation-client>graphql-toolkit>graphql-import>lodash
- @atomist/automation-client>apollo>@oclif/plugin-autocomplete>cli-ux>lodash
- @atomist/automation-client>apollo>@oclif/plugin-not-found>cli-ux>lodash
- @atomist/automation-client>apollo>@oclif/plugin-plugins>cli-ux>lodash
- @atomist/automation-client>apollo>gaze>globule>lodash
- @atomist/automation-client>apollo>heroku-cli-util>lodash
- @atomist/sdm-pack-fingerprints>@atomist/clj-editors>@cljs-oss/module-deps>babel-traverse>babel-types>lodash
- @atomist/sdm-pack-fingerprints>@cljs-oss/module-deps>babel-traverse>babel-types>lodash
- @atomist/sdm-pack-fingerprints>@atomist/clj-editors>@cljs-oss/module-deps>konan>babel-traverse>babel-types>lodash
- @atomist/sdm-pack-fingerprints>@cljs-oss/module-deps>konan>babel-traverse>babel-types>lodash
- @atomist/sdm-pack-fingerprints>@atomist/clj-editors>@cljs-oss/module-deps>babel-traverse>lodash
- @atomist/sdm-pack-fingerprints>@cljs-oss/module-deps>babel-traverse>lodash
- @atomist/sdm-pack-fingerprints>@atomist/clj-editors>@cljs-oss/module-deps>konan>babel-traverse>lodash
- @atomist/sdm-pack-fingerprints>@cljs-oss/module-deps>konan>babel-traverse>lodash
- @atomist/sdm-pack-issue>@octokit/rest>lodash
- @atomist/sdm-pack-issue>lodash
- @atomist/sdm-pack-k8s>lodash
- @atomist/sdm-pack-spring>@atomist/antlr>lodash
- lodash

[atomist:code-inspection:master=@atomist/atomist-sdm]

atomist-bot commented 5 years ago

Issue closed because last code inspection problem was fixed by @johnsonr when they pushed 5be6257.

atomist-bot commented 5 years ago

Issue closed because last code inspection problem was fixed by @atomist-bot when they pushed 5c6df4d.

atomist-bot commented 5 years ago

Issue closed because last code inspection problem was fixed by @cdupuis when they pushed baa7798.

atomist-bot commented 5 years ago

Issue closed because last code inspection problem was fixed by @cdupuis when they pushed 6603110.

cdupuis commented 5 years ago

Issue closed because last code inspection problem was fixed by @cdupuis when they pushed d4090a3.

atomist / uhura