Skip to content
This repository has been archived by the owner on Mar 1, 2019. It is now read-only.

nodemon: update to lose malicious package #81

Merged
merged 1 commit into from
Nov 27, 2018
Merged

nodemon: update to lose malicious package #81

merged 1 commit into from
Nov 27, 2018

Conversation

wiese
Copy link
Contributor

@wiese wiese commented Nov 27, 2018

nodemon is a tool that helps develop node.js based applications by
automatically restarting the node application when files change.
This updates it to the latest version to fix a security problem
remy/nodemon#1451

Dependency tree before was:

$ docker-compose run --rm node npm ls flatmap-stream
wikibase-termbox@0.1.0 /app
`-- nodemon@1.18.4
  `-- pstree.remy@1.1.0
    `-- ps-tree@1.1.0
      `-- event-stream@3.3.6
        `-- flatmap-stream@0.1.1      <- https://www.npmjs.com/advisories/737

nodemon is a tool that helps develop node.js based applications by
automatically restarting the node application when files change.
This updates it to the latest version to fix a security problem
remy/nodemon#1451

Dependency tree before was:
$ docker-compose run --rm node npm ls flatmap-stream
wikibase-termbox@0.1.0 /app
`-- nodemon@1.18.4
  `-- pstree.remy@1.1.0
    `-- ps-tree@1.1.0
      `-- event-stream@3.3.6
        `-- flatmap-stream@0.1.1      <- https://www.npmjs.com/advisories/737
@wiese
Copy link
Contributor Author

wiese commented Nov 27, 2018

If you have time to spare, take a look at the original issue for some open source philosophy.

@manicki manicki merged commit 1e7a294 into master Nov 27, 2018
@manicki manicki deleted the nodemon-fix branch November 27, 2018 11:23
@manicki
Copy link
Member

manicki commented Nov 27, 2018

wow

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants