library

library copied to clipboard

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.5 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.5.0 to 2.8.9. Changelog Sourced from hosted-git-info's changelog. 2.8.9 (2021-04-07) Bug Fixes backport regex fix from #76 (29adfe5), closes #84 2.8.8 (2020-02-29) Bug Fixes #61 & #65...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.4 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

- 在申请加入图书馆的时候，如果用户尚未注册，会跳转到注册的界面，但注册完之后没有接着提交申请，需要用户重新申请加入。对于新用户来说这一点很困惑，以为自己成功提交申请了，但管理员却无法看到。 - 任何用户进入到图书馆之后可以在借阅中页面通过拨打电话看到借书人的手机号，为了保护用户的隐私，建议只有对应图书馆管理员才能看到或拨打手机号。 - 目前录入图书比较麻烦，只有已经存在系统中的图书可以通过扫ISBN码一键录入，但系统中的图书毕竟是极少数，往往要用户手动填写图书信息（另外图书介绍的长度限制太短）。是否可以对接豆瓣读书的API根据ISBN拉取图书信息。 - 现在编辑图书的时候无法更新ISBN码，而有时候扫ISBN码显示的是微信的url,，希望录入图书的时候能够检验这个码，或者编辑图书的时候能够更新ISBN拿。

xulianghhu

Bumps [ini](https://github.com/isaacs/ini) from 1.3.4 to 1.3.7. Commits c74c8af 1.3.7 024b8b5 update deps, add linting 032fbaf Use Object.create(null) to avoid default object property hazards 2da9039 1.3.6 cfea636 better git push script,...

dependabot[bot]

已删除

eminfan

Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) from 2.3.2 to 2.3.4. Commits - [`e4dfb0a`](https://github.com/salesforce/tough-cookie/commit/e4dfb0aec5d25e9e982805417a5d936071badc17) 2.3.4 - [`7d66ffd`](https://github.com/salesforce/tough-cookie/commit/7d66ffde12af5cbad40c3642f3c339fa82e6e381) Update public suffix list - [`7564c06`](https://github.com/salesforce/tough-cookie/commit/7564c0637e6674d8847a1b84979536930eb9b170) Merge pull request [#100](https://github-redirect.dependabot.com/salesforce/tough-cookie/issues/100) from salesforce/no-re-parser - [`751da6d`](https://github.com/salesforce/tough-cookie/commit/751da6dadfeddb916b7dc5f524715afd4b02969c) Document removal of 256...

dependabot[bot]

Bumps [sshpk](https://github.com/joyent/node-sshpk) from 1.13.1 to 1.16.1. Release notes *Sourced from [sshpk's releases](https://github.com/joyent/node-sshpk/releases).* > ## v1.16.1 > * Fixes for [#60](https://github-redirect.dependabot.com/joyent/node-sshpk/issues/60) (correctly encoding certificates with expiry dates >=2050), [#62](https://github-redirect.dependabot.com/joyent/node-sshpk/issues/62) (accepting PKCS#8...

dependabot[bot]

Bumps [debug](https://github.com/visionmedia/debug) from 2.6.8 to 2.6.9. Release notes *Sourced from [debug's releases](https://github.com/visionmedia/debug/releases).* > ## 2.6.9 > ### Patches > > - Remove ReDoS regexp in `%o` formatter: [#504](https://github-redirect.dependabot.com/visionmedia/debug/issues/504) > >...

dependabot[bot]

Bumps [extend](https://github.com/justmoon/node-extend) from 3.0.1 to 3.0.2. Changelog *Sourced from [extend's changelog](https://github.com/justmoon/node-extend/blob/master/CHANGELOG.md).* > 3.0.2 / 2018-07-19 > ================== > * [Fix] Prevent merging `__proto__` property ([#48](https://github-redirect.dependabot.com/justmoon/node-extend/issues/48)) > * [Dev Deps] update...

dependabot[bot]