fix(deps): pin colors package to 1.4.0 due to security vulnerability

karma-runner · Jan 13, 2022 · a5219c5 · a5219c5
1 parent de0df2f
commit a5219c5
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -420,11 +420,14 @@
     "chalkerx@gmail.com>",
     "weiran.zsd@outlook.com>"
   ],
+  "overrides": {
+    "colors": "1.4.0"
+  },
   "dependencies": {
     "body-parser": "^1.19.0",
     "braces": "^3.0.2",
     "chokidar": "^3.5.1",
-    "colors": "^1.4.0",
+    "colors": "1.4.0",
     "connect": "^3.7.0",
     "di": "^0.0.1",
     "dom-serialize": "^2.2.1",