search

sindresorhus / cpy-cli

Copy files
MIT License
344 stars 33 forks source link

Update meow from 5.0.0 to 6.1.1 #25

Closed xtqqczze closed 4 years ago

xtqqczze commented 4 years ago

meow v6.1.1 updates yargs-parser to v18.1.2 which fixes a prototype pollution vulnerability as as asserted by npm audit.

https://github.com/sindresorhus/meow/pull/137 https://github.com/sindresorhus/meow/pull/148

sindresorhus commented 4 years ago

Meow is not affected by this as it doesn't support nested properties in flags. But I'm ok with bumping this to remove the warnings.