NPM 1 Low Security Vulnerability - yargs-parser

[kinueng]

Hello,

npm audit is reporting 1 low security vulnerability from yargs-parser. My understanding is an upgrade to meow [6.1.1] will include an patched version of yargs-parser.

npm audit output

                                                                                
                       === npm audit security report ===                        
                                                                                
┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ yargs-parser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=13.1.2 <14.0.0 || >=15.0.1 <16.0.0 || >=18.1.2             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ del-cli [dev]                                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ del-cli > meow > yargs-parser                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://nodesecurity.io/advisories/1500                      │
└───────────────┴──────────────────────────────────────────────────────────────┘
found 1 low severity vulnerability in 13924 scanned packages
  1 vulnerability requires manual review. See the full report for details.

[alexander-akait]

/cc @sindresorhus

[sindresorhus]

#16 (comment)