From e8e049d7e86d890a8d87e9ecfb989696c554d6aa Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 11 Oct 2017 13:57:57 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:tunnel-agent:20170305 - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:npm:20160418 - https://snyk.io/vuln/npm:request:20160119 - https://snyk.io/vuln/npm:qs:20170213 - https://snyk.io/vuln/npm:http-signature:20150122 - https://snyk.io/vuln/npm:tar:20151103 - https://snyk.io/vuln/npm:hawk:20160119 - https://snyk.io/vuln/npm:semver:20150403 - https://snyk.io/vuln/npm:mime:20170907 - https://snyk.io/vuln/npm:semver:20150403 Latest report for qwo/david: https://snyk.io/test/github/qwo/david --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index d95b71d..2f6d2d0 100644 --- a/package.json +++ b/package.json @@ -27,9 +27,9 @@ ], "dependencies": { "async": "^0.9.0", - "npm": "~1.4.4", + "npm": "~3.0.0", "optimist": "~0.6.0", - "semver": "^3.0.1" + "semver": "^4.3.2" }, "devDependencies": { "coveralls": "^2.10.0",