search

zhm / node-pg-query-native

PostgreSQL Query Parser for Node.js
BSD 3-Clause "New" or "Revised" License
29 stars 17 forks source link

Fixed vulnerabilities by upgrading dependency versions #17

Closed delaurentis closed 2 years ago

delaurentis commented 2 years ago

I upgraded node-gyp and mocha to fix 1 critical and 2 high security vulnerabilities.

The older version of node-gyp was using an old version of tar, where a vulnerability was discovered recently.

And mocha had 1 critical and a few medium vulnerabilities.

All tests past after the dependency upgrade.

@zhm would appreciate it if you could review and accept if the change looks good. The pg-query-walker npm module that I maintain depends on this module.

zhm commented 2 years ago

Thanks! A new version has pushed that includes the latest versions of these dependencies.