node-zopfli

node-zopfli copied to clipboard

As of today (23 June 2023), running `npm audit` on a project that uses node-zopfli results in the following audit report: ``` semver =2.1.3 Depends on vulnerable versions of prebuild-install...

mind-bending-forks

Bumps [flat](https://github.com/hughsk/flat) to 5.0.2 and updates ancestor dependency [mocha](https://github.com/mochajs/mocha). These dependencies need to be updated together. Updates `flat` from 4.1.0 to 5.0.2 Commits e5ffd66 Release 5.0.2 fdb79d5 Update dependencies, refresh...

dependabot[bot]

Bumps [qs](https://github.com/ljharb/qs) from 6.5.2 to 6.5.3. Changelog Sourced from qs's changelog. 6.5.3 [Fix] parse: ignore __proto__ keys (#428) [Fix] utils.merge: avoid a crash with a null target and a truthy...

dependabot[bot]

Needs to be updated to Python 3

3

The current dependency on Python 2.7 is a problem moving forward, as many users who are Mac-based will begin experiencing build errors. macOS removes Python 2.7 as of version 12.3.

btfranklin

Bumps [async](https://github.com/caolan/async) from 2.6.3 to 2.6.4. Changelog Sourced from async's changelog. v2.6.4 Fix potential prototype pollution exploit (#1828) Commits c6bdaca Version 2.6.4 8870da9 Update built files 4df6754 update changelog 8f7f903...

dependabot[bot]

Bumps [ajv](https://github.com/ajv-validator/ajv) from 6.10.0 to 6.12.6. Release notes Sourced from ajv's releases. v6.12.6 Fix performance issue of "url" format. v6.12.5 Fix uri scheme validation (@​ChALkeR). Fix boolean schemas with strictKeywords...

dependabot[bot]

Bumps [pathval](https://github.com/chaijs/pathval) from 1.1.0 to 1.1.1. Release notes Sourced from pathval's releases. v1.1.1 Fixes a security issue around prototype pollution. Commits db6c3e3 chore: v1.1.1 7859e0e Merge pull request #60 from...

dependabot[bot]

Core-dump

3

I use nodejs v16.13.1 . In 2020 I tried to switch from `node-zopfli-es` to `node-zopfli`, but then node crashed. Today I retried with the same results. When it crashes, it...

dilyanpalauzov

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.740.0 to 2.814.0. Changelog Sourced from aws-sdk's changelog. 2.814.0 bugfix: Credentials: SDK will throw if shared ini file's profile name can be resolved to proto feature: EC2:...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]