snyk-bot commented 5 years ago

Description

This PR fixes one or more vulnerable packages in the npm dependencies of this project. See the Snyk test report for more details.

Snyk Project: panva/node-openid-client:package.json

Snyk Organization: panva

Changes included in this PR

A Snyk policy (.snyk) file, with updated settings.

Vulnerabilities that will be fixed

With a Snyk patch:

SNYK-JS-LODASH-450202

You can read more about Snyk's upgrade and patch logic in Snyk's documentation.

Check the changes in this PR to ensure they won't cause issues with your project.

Stay secure, The Snyk team

Note: You are seeing this because you or someone else with access to this repository has authorised Snyk to open Fix PRs. To review the settings for this Snyk project please go to the project settings page.

codecov[bot] commented 5 years ago

Codecov Report

Merging #171 into master will not change coverage. The diff coverage is n/a.

@@          Coverage Diff          @@
##           master   #171   +/-   ##
=====================================
  Coverage     100%   100%           
=====================================
  Files          18     18           
  Lines         890    890           
=====================================
  Hits          890    890

panva commented 5 years ago

Project pollution by snyk detected. Lodash will get patched soon.

panva / openid-client

[Snyk] Fix for 1 vulnerable dependencies #171