egg-alinode
egg-alinode copied to clipboard
[Snyk] Security upgrade mkdirp from 0.5.1 to 1.0.0
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|
| Prototype Pollution SNYK-JS-MINIMIST-559764 |
Yes | Proof of Concept |
Commit messages
Package name: mkdirp
The new version differs by 12 commits.- 1b64c7b 1.0.0
- ed0ae94 new implementation for v1.0
- ae00d44 modernize travis
- 824f3f8 ignore stuff
- 2ecfd49 package updates
- b6ea965 coverage-map for test coverage focus
- 19511d6 add a changelog
- 2ed0350 give myself credit/blame along with subs
- c360cf5 tests for new version
- 3e68692 docs for new version
- f2003bb test: add v4 and v5 to travis
- b8629ff tools: update tap + mock-fs. Fix broken test
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
Codecov Report
:white_check_mark: All modified and coverable lines are covered by tests.
:white_check_mark: Project coverage is 95.23%. Comparing base (9b291c4) to head (6dd410d).
Additional details and impacted files
@@ Coverage Diff @@
## master #16 +/- ##
=======================================
Coverage 95.23% 95.23%
=======================================
Files 3 3
Lines 63 63
=======================================
Hits 60 60
Misses 3 3
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
:rocket: New features to boost your workflow:
- :snowflake: Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
- :package: JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.