Skip to content

[Snyk] Security upgrade shelljs from 0.8.4 to 0.9.0 #5

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

titanism
Copy link

snyk-top-banner

Snyk has created this PR to fix 2 vulnerabilities in the yarn dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • yarn.lock

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
medium severity Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
  631  
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818
  479  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

Copy link

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/braces@3.0.23.0.3 None 0 44.6 kB jonschlinkert
npm/cross-spawn@6.0.56.0.6 None +1 79.9 kB satazor
npm/execa@1.0.0 environment, shell 0 19.9 kB sindresorhus
npm/fast-glob@3.2.43.3.3 None 0 98.4 kB mrmlnc
npm/fill-range@7.0.17.1.1 None 0 16.7 kB jonschlinkert
npm/glob-parent@5.1.15.1.2 None +1 23.4 kB phated
npm/is-stream@1.1.0 None 0 3.23 kB sindresorhus
npm/micromatch@4.0.24.0.8 None 0 56.6 kB doowb
npm/npm-run-path@4.0.12.0.2 None +1 7.55 kB sindresorhus
npm/picomatch@2.2.22.3.1 None 0 90 kB mrmlnc
npm/shelljs@0.8.40.9.1 None 0 148 kB artur, freitagbr, nfischer
npm/vfile-statistics@1.1.4 None 0 6.94 kB wooorm
npm/wcwidth@1.0.1 None 0 14.2 kB timoxley
npm/well-known-symbols@2.0.0 None 0 3.26 kB novemberborn
npm/which-module@2.0.0 None 0 4.58 kB nexdrew
npm/which-pm-runs@1.0.0 None 0 2.87 kB zkochan
npm/widest-line@3.1.0 None 0 3.73 kB sindresorhus
npm/word-wrap@1.2.3 None 0 10.6 kB jonschlinkert
npm/wrap-ansi@6.2.0 None 0 9.5 kB sindresorhus
npm/wrapped@1.0.1 None 0 5.03 kB mattmueller
npm/wrappy@1.0.2 None 0 2.96 kB zkat
npm/write-file-atomic@3.0.3 filesystem 0 12.8 kB isaacs
npm/write-json-file@2.3.0 None 0 5.49 kB sindresorhus
npm/write-pkg@3.2.0 None 0 4.45 kB sindresorhus
npm/write@1.0.3 filesystem 0 14.7 kB jonschlinkert
npm/xdg-basedir@4.0.0 None 0 5.69 kB sindresorhus
npm/xo-init@0.7.0 filesystem Transitive: environment, shell +1 25.2 kB sindresorhus
npm/xo@0.25.4 Transitive: filesystem +4 119 kB sindresorhus
npm/xtend@4.0.2 None 0 6.46 kB raynos
npm/y18n@4.0.0 filesystem 0 10.4 kB nexdrew
npm/yallist@2.1.2 None 0 13.6 kB isaacs
npm/yaml@1.10.0 environment 0 445 kB eemeli
npm/yargs-parser@10.1.0 environment 0 48.4 kB bcoe
npm/yargs@15.3.1 environment, filesystem +1 254 kB oss-bot

View full report↗︎

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants