From b518bc189120dcbc5e9f795da154e5f1021b8ca6 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 14 Mar 2021 23:18:00 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SSRI-1085630 --- package.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index f067b6c..8334872 100644 --- a/package.json +++ b/package.json @@ -38,11 +38,11 @@ "lodash.clonedeep": "~4.5.0", "lodash.uniq": "~4.5.0", "log-driver": "^1.2", - "npm": "^6.4.1", + "npm": "^7.0.0", "npm-audit-report": "^1.3.1", - "npm-registry-fetch": "^1.1.0", + "npm-registry-fetch": "^7.0.0", "npmlog": "~4.1.2", - "pacote": "^9.1.0", + "pacote": "^11.0.0", "qw": "~1.0.1", "ramda": "^0.25.0", "read-package-tree": "^5.2.1", @@ -50,7 +50,7 @@ "sanctuary": "^0.15.0", "slide": "~1.1.6", "snyk": "^1.231.0", - "ssri": "^6.0.0", + "ssri": "^8.0.1", "uuid": "^3.3.2" }, "engines": {