clarkie / dynogels

DynamoDB data mapper for node.js. Originally forked from https://github.com/ryanfitz/vogels
Other
490 stars 110 forks source link

Patch/update dependencies to fix vulnerabilities #165

Closed ibrahimlawal closed 5 years ago

ibrahimlawal commented 5 years ago

Description

Motivation and Context

I visited the repository with the intention to use the library. Was scared to see 2 vulnerabilities listed for existing dependencies.

How Has This Been Tested?

Ran npm test and all tests passed.

coveralls commented 5 years ago

Coverage Status

Coverage remained the same at 98.541% when pulling 2dd55591d98e0829ef9e09f45611014ebe18eda0 on ibrahimlawal:patch/update-dependencies-to-fix-vulnerabilities into df7acfeffe5ad22488bc2d40e9674c939df67ed8 on clarkie:master.

ibrahimlawal commented 5 years ago

@clarkie hello there

CyrineBS commented 5 years ago

5 months later these vulnerabilities are still here. can you merge these updates please?