From 14595dbb924a7fbd48cf2153d8f4fd1b6bef0e7f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 12 Sep 2020 02:04:06 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NODEFETCH-674311 --- package-lock.json | 10 ++++++---- package.json | 2 +- 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index a696380..6b03b9e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,6 +1,8 @@ { - "requires": true, + "name": "sign", + "version": "1.0.0", "lockfileVersion": 1, + "requires": true, "dependencies": { "acorn": { "version": "5.5.3", @@ -504,9 +506,9 @@ } }, "node-fetch": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.1.2.tgz", - "integrity": "sha1-q4hOjn5X44qUR1POxwb3iNF2i7U=" + "version": "2.6.1", + "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.1.tgz", + "integrity": "sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw==" }, "node-forge": { "version": "0.7.5", diff --git a/package.json b/package.json index 3ec1df6..3fa0104 100644 --- a/package.json +++ b/package.json @@ -6,7 +6,7 @@ "dependencies": { "forge": "^2.3.0", "inquirer": "^5.2.0", - "node-fetch": "^2.1.2", + "node-fetch": "^2.6.1", "node-forge": "^0.7.5" }, "devDependencies": {},