search

orfattal / snyk-goof-master

0 stars 3 forks source link

[Snyk] Security upgrade tap from 5.8.0 to 12.0.2 #19

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Prototype Pollution
SNYK-JS-Y18N-1021887		 Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: tap The new version differs by 250 commits.
  • 7a20037 12.0.2
  • cf95e01 bump nyc and standard
  • 7f54124 Bump deps for security and bugfixes
  • f323cdc 12.0.1
  • 6745ecf fix test regression in node <10
  • 39f73f9 docs(coverage): browser launching details
  • 3336514 Fix interse typo in asserts docs
  • c1070a7 Add twing to the 100 club
  • 51ae4f2 Do not run coverage report if ended with a signal
  • d5f7b12 12.0.0
  • 5de8801 Update tsame and tmatch, resolve request security vuln
  • a62dfcf 11.1.5
  • d930902 upgrade deps to avoid security warnings
  • fae29d0 make tests pass in node v10
  • f9d64f6 don't include internal filenames in snapshots
  • 5303417 avoid custom inspect deprecation warning
  • e374e7c add dotenv to the tap 100 list
  • 8635bfb 11.1.4
  • 3346fc1 Don't require argv file list if specified in taprc
  • fe8158e 11.1.3
  • b17542d Upgrade deps (changing semver requirements)
  • bc3ba17 update deps
  • bd4de92 Clean up nyc output so Travis passes on node 6
  • 2292432 Add hexagonal-lambda to the tap 100 list
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic