From 859780c7d7a6f9778a2e2d6dbb054a378ee8beae Mon Sep 17 00:00:00 2001 From: sturdy <1645884+sturdy5@users.noreply.github.com> Date: Mon, 10 Jan 2022 13:04:43 -0500 Subject: [PATCH] Update jscodeshift to resolve a security vuln A Security Vuln was identified in the Colors package for `>1.4.0`, offending packages being `1.4.1`, `1.4.44-liberty` * [source1](https://twitter.com/snyksec/status/1480286811482206216?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Etweet) * [source2](https://security.snyk.io/vuln/SNYK-JS-COLORS-2331906) This PR updates the `jscodeshift` dependency to use version 0.13.1 which removed the dependency on `colors` --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index c8df4cb..d1004b1 100644 --- a/package.json +++ b/package.json @@ -29,7 +29,7 @@ "@vue/compiler-dom": "^3.0.5", "debug": "^4.1.1", "globby": "^11.0.2", - "jscodeshift": "^0.11.0", + "jscodeshift": "^0.13.1", "lru-cache": "^6.0.0", "source-map": "^0.6.1", "yargs": "^16.2.0"