Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update meow from v5 to v6 #16

Merged
merged 1 commit into from
May 16, 2020
Merged

Update meow from v5 to v6 #16

merged 1 commit into from
May 16, 2020

Conversation

kinueng
Copy link
Contributor

@kinueng kinueng commented May 8, 2020

Fixes #15

  • meow v6.1.1 updated yargs-parser to v18.1.2, which contains a fix for
    a Prototype Pollution vulnerability reported in npm audit.

Testing

npm run-script test output

> [email protected] test /Users/kueng/work/sandboxes/del-cli
> xo && ava



  1 test passed

npm audit --production output

Using npm v6.14.5

                       === npm audit security report ===                        
                                                                                
found 0 vulnerabilities
 in 147 scanned packages

- meow v6.1.1 updated yargs-parser to v18.1.2, which contains a fix for
a Prototype Pollution vulnerability reported in npm audit.
@kinueng
Copy link
Contributor Author

kinueng commented May 8, 2020

Updated description with testing with npm audit after upgrading meow to v6.1.1

@sindresorhus
Copy link
Owner

To be clear, there's no vulnerability here as meow is not vulnerable as it doesn't support nested flags, but I'm ok with updating to remove the audit.

@sindresorhus sindresorhus changed the title Update meow from v5.0.0 to v6.1.1 Update meow from v5 to v6 May 16, 2020
@sindresorhus sindresorhus merged commit 922e9fe into sindresorhus:master May 16, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

NPM 1 Low Security Vulnerability - yargs-parser
2 participants