tabacws-sandbox / juice-shop-checkPR

MIT License
0 stars 0 forks source link

Update dependency check-dependencies to v2 #95

Open mend-for-github-com[bot] opened 8 months ago

mend-for-github-com[bot] commented 8 months ago

This PR contains the following updates:

Package Type Update Change
check-dependencies dependencies major ^1.1.0 -> ^2.0.0

By merging this PR, the issue #15 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2021-44906

Release Notes

mgol/check-dependencies (check-dependencies) ### [`v2.0.0`](https://togithub.com/mgol/check-dependencies/releases/tag/2.0.0) [Compare Source](https://togithub.com/mgol/check-dependencies/compare/1.1.1...2.0.0) Notable non-breaking changes: - support npm package aliases ([#​50](https://togithub.com/mgol/check-dependencies/issues/50)) - reduced a number of external dependencies - `npm prune` is no longer called as`npm install` already prunes Breaking changes: - dropped the callback interface - use promises instead - dropped the `checkCustomPackageNames` option - CLI argument parsing is more strict now; camelCase parameter versions like `--packageDir` are no longer supported; use their kebab-case versions like `--package-dir`. - dropped Bower support - dropped support for Node.js `<18.3` ### [`v1.1.1`](https://togithub.com/mgol/check-dependencies/releases/tag/1.1.1) [Compare Source](https://togithub.com/mgol/check-dependencies/compare/1.1.0...1.1.1) Add basic validation of the `packageManager` option; document that it's not safe to pass untrusted input there.