meanjs / generator-meanjs

MEAN.JS Official Yeoman Generator
http://meanjs.org/
473 stars 177 forks source link

[Snyk] Fix for 1 vulnerabilities #296

Open snyk-bot opened 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: yeoman-generator The new version differs by 131 commits.
  • 9e4ccf5 2.0.0
  • a29e5d9 Bump dependencies
  • 96da393 Bump package-lock.json
  • 4b1b841 Replace gulp with raw Mocha
  • 6effbfe Use raw nsp
  • 183b3a8 Get rid of before/after (toward jest migration)
  • 68d59c1 Add package-lock.json
  • f8e46b0 Don't die on diffing file deletions (again) (#1028)
  • edc2bf2 [comments] Change wrong param name in description (#1018)
  • 364606e Switch to `make-dir`
  • eaf1ade New: option shorthand on installDependencies method (#1015)
  • e296e52 Bump XO and minor style tweaks
  • 9da7391 Bump dependencies
  • b010701 More ES2015ifing
  • cfd2a8e Refactor install methods to handle promises - ref #1006
  • 1be88e6 Remove callback API from Genrator#github.username() in favor of Promise one - ref #1006
  • 00912ce Remove class-extend (isn't necessary with ES6), clean jsdoc
  • 2cab46e Get rid of some dependencies
  • 6553965 More ES2015ification
  • d535bac Initial ES2015ification
  • 80863b0 1.1.1
  • af3048f Fix issue with API documentation deploy script
  • 74cb46f Document legacy Generator.extend method properly - rel #996
  • 6d267f0 Use XO
See the full diff
Package name: yo The new version differs by 66 commits.
  • 4aafcab 2.0.3
  • 2c478a4 Audit fix
  • ae35426 Fix generator description returning undefined (#587)
  • 4f4c36e Update dependencies
  • 7ad1609 Ensure the same npm version is used for testing
  • 9053bbd Remove the `nsp` task
  • dab9337 Require Node.js 6
  • 479250a 2.0.2
  • 725461b Added global-tunnel-ng to allow usage behind a proxy (#573)
  • 3134157 Spelling (#568)
  • 6153a0d 2.0.1
  • f40c521 Update got and its dependents (#563)
  • 649200a Add BSD 2-Clause license (#555)
  • 4142ca9 Fixes ParseError (#554)
  • 035faf7 Proper OpenCollective badge
  • bfa4ef2 Fix open collective badge in readme.md (#548)
  • 77bdb9b Add documentation for running local generators (#547)
  • ab77908 2.0.0
  • 11af8d6 Bump yeoman-environment to 2.0
  • a75d174 Better error handling when 'generator-' prefix is specified (#520)
  • 6e1a870 Bump dependencies
  • ecd7ffa ES2015ify
  • 018cd95 Bump dependencies
  • b41958c Bump `async`. (#506)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: šŸ§ View latest project report

šŸ›  Adjust project settings

šŸ“š Read more about Snyk's upgrade and patch logic