Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update vulnerable dependencies trim-newlines and glob-parent #679

Open
splatteredbits opened this issue Jul 29, 2021 · 1 comment
Open

Comments

@splatteredbits
Copy link

splatteredbits commented Jul 29, 2021

Type of issue

npm audit fails when I'm using Yo 4.2.0. Advisories 1751 in glob-parent (moderate) and 1753 in trim-newlines (high).


My environment

  • Windows 10 x64
  • Node.js 14.17.4
  • NPM 6.14.14
  • Yo 4.2.0

Expected behavior

No security vulnerabilities.

Current behavior

There are 36 vulnerabilities.

Steps to reproduce the behavior

  1. npm install yo@latest
  2. npm audit

Command line output

yo vulns.txt

@Logicer16
Copy link
Contributor

trim-newlines is a dependency of meow and was reported in #672. It should be fixed with #675.

For glob-parent though, by looking at your npm audit output, it looks like one of generators may be using an outdated version of yeoman-generator, as the issue seems to be patched in the latest version. I'd recommend looking through your generators and seeing which ones use the vulnerable version of glob-parent and then getting those generators to move to the latest version of yeoman-generator.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants