feat: use patched @snyk/graphlib

snyk / nodejs-lockfile-parser

Generate a Snyk dependency tree from package-lock.json or yarn.lock file

Other

59 stars 28 forks source link

Closed lili2311 closed 4 years ago

lili2311 commented 4 years ago

[ ] Tests written and linted
[ ] Documentation written / README.md updated https://snyk.io/docs/snyk-for-node/
[ ] Follows CONTRIBUTING agreement
[ ] Commit history is tidy https://git-scm.com/book/en/v2/Git-Branching-Rebasing
[ ] Reviewed by Snyk team

Use patched @snyk/graphlib to remove vulnerable lodash https://github.com/snyk/snyk/pull/1093

snyksec commented 4 years ago

:tada: This PR is included in version 1.22.0 :tada:

The release is available on:

Your semantic-release bot :package::rocket: