Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix several security vulnerabilities #258

Closed
wants to merge 2 commits into from

Conversation

nolbuzanis
Copy link
Contributor

Fixed all found via npm audit.

Note: Mocha is updated to 9.2.2 from 8.x.x, with breaking changes.

TLDR
Dropping Node.js v10.x support - does not matter since we use 14.x
Import-first loading of test files - does not matter since all test files already use import

@alkihis
Copy link
Collaborator

alkihis commented Apr 7, 2022

Considering this package hasn't any public dependencies, npm audit result don't make sense, only dev packages are affected.
I can accept it but can you please generate the lockfile in its original version (2)? You need a recent version of npm.

@alkihis alkihis closed this Aug 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants