Angular 4+ server-side rendering solution compatible with @angular/material, jQuery, and other libraries that touch the DOM (as well as providing a rich feature set!)
BSD 2-Clause "Simplified" License
279
stars
38
forks
source link
[Snyk] Security upgrade npm from 4.6.1 to 7.0.0 #130
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
SNYK-JS-HOSTEDGITINFO-1088355
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: npm
The new version differs by 250 commits.- 3b4ba65 7.0.0
- bbfc75d chore: fix weird .gitignore thing that happened somehow
- 8a2d375 docs: changelog for v7.0.0
- 365f2e7 read-package-json@3.0.0
- fafb348 npm-package-arg@8.1.0
- 9306c68 libnpmfund@1.0.1
- 569cd64 libnpmfund@1.0.0
- ac9fde7 Integration code for @ npmcli/arborist@1.0.0
- 704b9cd @ npmcli/arborist@1.0.0
- 3955bb9 hosted-git-info@3.0.6
- da240ef fix: patch config.js to remove duplicate values
- 9ae45a8 init-package-json@2.0.0
- 41ab36d eslint@7.11.0
- c474a15 npm-registry-fetch@8.1.5
- efc6786 fix: make sure publishConfig is passed through
- 1e4e6e9 docs: v7 using npm config refresh
- 5c1c2da fix: init config aliases
- 5bc7eb2 docs: v7 npm-install refresh
- 1a35d87 7.0.0-rc.4
- 7a5a557 docs: changelog for v7.0.0-rc.4
- f0cf859 chore: dedupe deps
- 0273745 make-fetch-happen@8.0.10
- 7bd47ca @ npmcli/arborist@0.0.33
- 9320b8e only escape arguments, not the command name
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic