From fa21c91bcd29a0a69b48723545918316697be26a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 21 Mar 2022 17:04:18 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430337 - https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430339 - https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430341 --- package-lock.json | 10 ++++++---- package.json | 2 +- 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index a696380..5f5e14e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,6 +1,8 @@ { - "requires": true, + "name": "sign", + "version": "1.0.0", "lockfileVersion": 1, + "requires": true, "dependencies": { "acorn": { "version": "5.5.3", @@ -509,9 +511,9 @@ "integrity": "sha1-q4hOjn5X44qUR1POxwb3iNF2i7U=" }, "node-forge": { - "version": "0.7.5", - "resolved": "https://registry.npmjs.org/node-forge/-/node-forge-0.7.5.tgz", - "integrity": "sha512-MmbQJ2MTESTjt3Gi/3yG1wGpIMhUfcIypUCGtTizFR9IiccFwxSpfp0vtIZlkFclEqERemxfnSdZEMR9VqqEFQ==" + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/node-forge/-/node-forge-1.3.0.tgz", + "integrity": "sha512-08ARB91bUi6zNKzVmaj3QO7cr397uiDT2nJ63cHjyNtCTWIgvS47j3eT0WfzUwS9+6Z5YshRaoasFkXCKrIYbA==" }, "once": { "version": "1.4.0", diff --git a/package.json b/package.json index 3ec1df6..343b67e 100644 --- a/package.json +++ b/package.json @@ -7,7 +7,7 @@ "forge": "^2.3.0", "inquirer": "^5.2.0", "node-fetch": "^2.1.2", - "node-forge": "^0.7.5" + "node-forge": "^1.3.0" }, "devDependencies": {}, "scripts": {