Open snyk-bot opened 3 years ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
SNYK-JS-ANSIREGEX-1583908
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: chalk
The new version differs by 53 commits.- 3fca615 2.0.0
- f66271e Add tagged template literal (#163)
- 23ef1c7 fix linter errors
- c015568 add rainbow example
- 09fb2d8 Re-implement `chalk.enabled` (#160)
- 608242a spoof supports-color
- 18f2e7c add host information output
- 523b998 Revert "TEMPORARY: emergency travis CI fix (see comments)"
- 54975fb TEMPORARY: emergency travis CI fix (see comments)
- 1d73b21 Improve readme
- 6f4d6b3 Bump dependencies
- 8702496 Remove `chalk.styles`
- 0412cdf Minor code improvements
- 249b9ac ES2015ify the codebase
- cb3f230 Add RGB (256/Truecolor) support (#140)
- dbae68d Update dependent package count in the readme (#154)
- 9b60021 Drop support for Node.js 0.10 and 0.12
- 0d21449 check parent builder object for enabled status (#142)
- 5a69476 add XO badge
- 492f11f add example file
- 4ce73b6 make XO happy
- 7c02cf4 Add log statement to chalk examples (#129)
- 835ca3d You've just reached 10,000 dependent modules. (#122)
- 74c087d minor doc improvements (#120)
See the full diffPackage name: update-notifier
The new version differs by 8 commits.- 58d0b22 0.6.1
- 49634e6 improve the update notification message
- 32c97c4 0.6.0
- 7ef4438 bump deps
- f070a1e add XO
- be57796 tweaks
- e5007ee Merge pull request #58 from etiktin/use_minimal_pkg
- 2ead0c9 Use minimal pkg instead of full package.json
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic