Skip to content

Conversation

jirutka
Copy link
Contributor

@jirutka jirutka commented Aug 27, 2023

See the commit messages.

Fixes #110

There's something wrong in the lock file - npm gets stuck when
installing dependencies.
    minimist  <=0.2.3
    Severity: critical
    Prototype Pollution in minimist - GHSA-xvch-5gv4-984h
    Prototype Pollution in minimist - GHSA-vh95-rmgr-6w4m
    fix available via `npm audit fix --force`
    Will install [email protected], which is a breaking change
    node_modules/optimist/node_modules/minimist
      optimist  >=0.6.0
      Depends on vulnerable versions of minimist
      node_modules/optimist

    2 critical severity vulnerabilities
@tomcollins
Copy link
Owner

Thanks for the PR @jirutka :)

@tomcollins tomcollins merged commit 5f2de0a into tomcollins:master Sep 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

package optimist is used in cli.js but not declared in package.json
2 participants