0
Fork 0
mirror of https://github.com/verdaccio/verdaccio.git synced 2025-01-13 22:48:31 -05:00

fix: vulnerabilities dependencies

This commit is contained in:
Juan Picado @jotadeveloper 2018-05-13 23:12:31 +02:00
parent 2b4b0a4abb
commit d4722d6aa2
No known key found for this signature in database
GPG key ID: 18AC54485952D158
2 changed files with 53 additions and 180 deletions

View file

@ -15,26 +15,26 @@
"verdaccio": "./bin/verdaccio"
},
"dependencies": {
"@verdaccio/file-locking": "0.0.5",
"@verdaccio/file-locking": "0.0.7",
"@verdaccio/local-storage": "1.0.2",
"@verdaccio/streams": "1.0.0",
"JSONStream": "1.3.2",
"async": "2.6.0",
"body-parser": "1.18.2",
"bunyan": "1.8.12",
"chalk": "2.3.2",
"chalk": "2.4.1",
"commander": "2.15.0",
"compression": "1.7.2",
"cookies": "0.7.1",
"cors": "2.8.4",
"date-fns": "1.29.0",
"express": "4.16.2",
"express": "4.16.3",
"global": "4.3.2",
"handlebars": "4.0.11",
"http-errors": "1.6.2",
"js-string-escape": "1.0.1",
"js-yaml": "3.11.0",
"jsonwebtoken": "8.2.0",
"jsonwebtoken": "8.2.1",
"lockfile": "1.0.3",
"lodash": "4.17.10",
"lunr": "0.7.0",
@ -43,7 +43,7 @@
"minimatch": "3.0.4",
"mkdirp": "0.5.1",
"pkginfo": "0.4.1",
"request": "2.83.0",
"request": "2.85.0",
"semver": "5.5.0",
"verdaccio-htpasswd": "0.2.2"
},
@ -55,7 +55,7 @@
"babel-cli": "6.26.0",
"babel-core": "6.26.0",
"babel-eslint": "8.2.2",
"babel-jest": "22.4.1",
"babel-jest": "22.4.3",
"babel-loader": "7.1.4",
"babel-plugin-flow-runtime": "0.17.0",
"babel-plugin-transform-async-to-generator": "6.24.1",
@ -73,7 +73,7 @@
"babel-preset-stage-3": "6.24.1",
"babel-register": "6.26.0",
"babel-runtime": "6.26.0",
"codecov": "3.0.0",
"codecov": "3.0.2",
"cross-env": "5.1.4",
"css-loader": "0.28.10",
"element-react": "1.4.8",
@ -97,14 +97,14 @@
"husky": "0.15.0-rc.8",
"identity-obj-proxy": "3.0.0",
"in-publish": "2.0.0",
"jest": "22.4.2",
"jest-environment-jsdom": "22.4.1",
"jest": "22.4.3",
"jest-environment-jsdom": "22.4.3",
"jest-environment-jsdom-global": "1.0.3",
"jest-environment-node": "22.4.1",
"jest-environment-node": "22.4.3",
"localstorage-memory": "1.0.2",
"mini-css-extract-plugin": "0.4.0",
"node-mocks-http": "1.6.7",
"node-sass": "4.7.2",
"node-sass": "4.9.0",
"normalize.css": "8.0.0",
"ora": "1.4.0",
"prop-types": "15.6.1",
@ -129,7 +129,7 @@
"verdaccio-memory": "1.0.1",
"webpack": "4.6.0",
"webpack-cli": "2.0.15",
"webpack-dev-server": "3.1.3",
"webpack-dev-server": "3.1.4",
"webpack-merge": "4.1.2",
"whatwg-fetch": "2.0.3"
},

209
yarn.lock
View file

@ -231,7 +231,7 @@
lockfile "1.0.3"
lodash "4.17.4"
"@verdaccio/file-locking@^0.0.7":
"@verdaccio/file-locking@0.0.7", "@verdaccio/file-locking@^0.0.7":
version "0.0.7"
resolved "https://registry.npmjs.org/@verdaccio/file-locking/-/file-locking-0.0.7.tgz#5fd1b2bd391e54fa32d079002b5f7ba90844e344"
dependencies:
@ -837,14 +837,7 @@ babel-helpers@^6.24.1:
babel-runtime "^6.22.0"
babel-template "^6.24.1"
babel-jest@22.4.1:
version "22.4.1"
resolved "https://registry.npmjs.org/babel-jest/-/babel-jest-22.4.1.tgz#ff53ebca45957347f27ff4666a31499fbb4c4ddd"
dependencies:
babel-plugin-istanbul "^4.1.5"
babel-preset-jest "^22.4.1"
babel-jest@^22.4.3:
babel-jest@22.4.3, babel-jest@^22.4.3:
version "22.4.3"
resolved "https://registry.npmjs.org/babel-jest/-/babel-jest-22.4.3.tgz#4b7a0b6041691bbd422ab49b3b73654a49a6627a"
dependencies:
@ -1329,7 +1322,7 @@ babel-preset-flow@6.23.0, babel-preset-flow@^6.23.0:
dependencies:
babel-plugin-transform-flow-strip-types "^6.22.0"
babel-preset-jest@^22.4.1, babel-preset-jest@^22.4.3:
babel-preset-jest@^22.4.3:
version "22.4.3"
resolved "https://registry.npmjs.org/babel-preset-jest/-/babel-preset-jest-22.4.3.tgz#e92eef9813b7026ab4ca675799f37419b5a44156"
dependencies:
@ -1868,9 +1861,9 @@ chalk@2.3.1:
escape-string-regexp "^1.0.5"
supports-color "^5.2.0"
chalk@2.3.2, chalk@^2.0.0, chalk@^2.0.1, chalk@^2.1.0, chalk@^2.3.2:
version "2.3.2"
resolved "https://registry.npmjs.org/chalk/-/chalk-2.3.2.tgz#250dc96b07491bfd601e648d66ddf5f60c7a5c65"
chalk@2.4.1, chalk@^2.3.0:
version "2.4.1"
resolved "https://registry.npmjs.org/chalk/-/chalk-2.4.1.tgz#18c49ab16a037b6eb0152cc83e3471338215b66e"
dependencies:
ansi-styles "^3.2.1"
escape-string-regexp "^1.0.5"
@ -1886,9 +1879,9 @@ chalk@^1.0.0, chalk@^1.1.1, chalk@^1.1.3:
strip-ansi "^3.0.0"
supports-color "^2.0.0"
chalk@^2.3.0:
version "2.4.1"
resolved "https://registry.npmjs.org/chalk/-/chalk-2.4.1.tgz#18c49ab16a037b6eb0152cc83e3471338215b66e"
chalk@^2.0.0, chalk@^2.0.1, chalk@^2.1.0, chalk@^2.3.2:
version "2.3.2"
resolved "https://registry.npmjs.org/chalk/-/chalk-2.3.2.tgz#250dc96b07491bfd601e648d66ddf5f60c7a5c65"
dependencies:
ansi-styles "^3.2.1"
escape-string-regexp "^1.0.5"
@ -2139,12 +2132,12 @@ code-point-at@^1.0.0:
version "1.1.0"
resolved "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz#0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
codecov@3.0.0:
version "3.0.0"
resolved "https://registry.npmjs.org/codecov/-/codecov-3.0.0.tgz#c273b8c4f12945723e8dc9d25803d89343e5f28e"
codecov@3.0.2:
version "3.0.2"
resolved "https://registry.npmjs.org/codecov/-/codecov-3.0.2.tgz#aea43843a5cd2fb6b7e488b2eff25d367ab70b12"
dependencies:
argv "0.0.2"
request "2.81.0"
request "^2.81.0"
urlgrey "0.4.4"
collapse-white-space@^1.0.2:
@ -3138,7 +3131,7 @@ emojis-list@^2.0.0:
version "2.1.0"
resolved "https://registry.npmjs.org/emojis-list/-/emojis-list-2.1.0.tgz#4daa4d9db00f9819880c79fa457ae5b09a1fd389"
encodeurl@~1.0.1, encodeurl@~1.0.2:
encodeurl@~1.0.2:
version "1.0.2"
resolved "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz#ad3ff4c86ec2d029322f5a02c3a9a606c95b3f59"
@ -3574,42 +3567,7 @@ expect@^22.4.3:
jest-message-util "^22.4.3"
jest-regex-util "^22.4.3"
express@4.16.2:
version "4.16.2"
resolved "https://registry.npmjs.org/express/-/express-4.16.2.tgz#e35c6dfe2d64b7dca0a5cd4f21781be3299e076c"
dependencies:
accepts "~1.3.4"
array-flatten "1.1.1"
body-parser "1.18.2"
content-disposition "0.5.2"
content-type "~1.0.4"
cookie "0.3.1"
cookie-signature "1.0.6"
debug "2.6.9"
depd "~1.1.1"
encodeurl "~1.0.1"
escape-html "~1.0.3"
etag "~1.8.1"
finalhandler "1.1.0"
fresh "0.5.2"
merge-descriptors "1.0.1"
methods "~1.1.2"
on-finished "~2.3.0"
parseurl "~1.3.2"
path-to-regexp "0.1.7"
proxy-addr "~2.0.2"
qs "6.5.1"
range-parser "~1.2.0"
safe-buffer "5.1.1"
send "0.16.1"
serve-static "1.13.1"
setprototypeof "1.1.0"
statuses "~1.3.1"
type-is "~1.6.15"
utils-merge "1.0.1"
vary "~1.1.2"
express@^4.16.2:
express@4.16.3, express@^4.16.2:
version "4.16.3"
resolved "https://registry.npmjs.org/express/-/express-4.16.3.tgz#6af8a502350db3246ecc4becf6b5a34d22f7ed53"
dependencies:
@ -3814,18 +3772,6 @@ fill-range@^4.0.0:
repeat-string "^1.6.1"
to-regex-range "^2.1.0"
finalhandler@1.1.0:
version "1.1.0"
resolved "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.0.tgz#ce0b6855b45853e791b2fcc680046d88253dd7f5"
dependencies:
debug "2.6.9"
encodeurl "~1.0.1"
escape-html "~1.0.3"
on-finished "~2.3.0"
parseurl "~1.3.2"
statuses "~1.3.1"
unpipe "~1.0.0"
finalhandler@1.1.1:
version "1.1.1"
resolved "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.1.tgz#eebf4ed840079c83f4249038c9d703008301b105"
@ -5346,7 +5292,7 @@ jest-changed-files@^22.4.3:
dependencies:
throat "^4.0.0"
jest-cli@^22.4.2:
jest-cli@^22.4.3:
version "22.4.3"
resolved "https://registry.npmjs.org/jest-cli/-/jest-cli-22.4.3.tgz#bf16c4a5fb7edc3fa5b9bb7819e34139e88a72c7"
dependencies:
@ -5420,15 +5366,7 @@ jest-environment-jsdom-global@1.0.3:
version "1.0.3"
resolved "https://registry.npmjs.org/jest-environment-jsdom-global/-/jest-environment-jsdom-global-1.0.3.tgz#e0616c235709e6919f33f9b5e5c3854cd8edba39"
jest-environment-jsdom@22.4.1:
version "22.4.1"
resolved "https://registry.npmjs.org/jest-environment-jsdom/-/jest-environment-jsdom-22.4.1.tgz#754f408872441740100d3917e5ec40c74de6447f"
dependencies:
jest-mock "^22.2.0"
jest-util "^22.4.1"
jsdom "^11.5.1"
jest-environment-jsdom@^22.4.3:
jest-environment-jsdom@22.4.3, jest-environment-jsdom@^22.4.3:
version "22.4.3"
resolved "https://registry.npmjs.org/jest-environment-jsdom/-/jest-environment-jsdom-22.4.3.tgz#d67daa4155e33516aecdd35afd82d4abf0fa8a1e"
dependencies:
@ -5436,14 +5374,7 @@ jest-environment-jsdom@^22.4.3:
jest-util "^22.4.3"
jsdom "^11.5.1"
jest-environment-node@22.4.1:
version "22.4.1"
resolved "https://registry.npmjs.org/jest-environment-node/-/jest-environment-node-22.4.1.tgz#418850eb654596b8d6e36c2021cbedbc23df8e16"
dependencies:
jest-mock "^22.2.0"
jest-util "^22.4.1"
jest-environment-node@^22.4.3:
jest-environment-node@22.4.3, jest-environment-node@^22.4.3:
version "22.4.3"
resolved "https://registry.npmjs.org/jest-environment-node/-/jest-environment-node-22.4.3.tgz#54c4eaa374c83dd52a9da8759be14ebe1d0b9129"
dependencies:
@ -5506,7 +5437,7 @@ jest-message-util@^22.4.3:
slash "^1.0.0"
stack-utils "^1.0.1"
jest-mock@^22.2.0, jest-mock@^22.4.3:
jest-mock@^22.4.3:
version "22.4.3"
resolved "https://registry.npmjs.org/jest-mock/-/jest-mock-22.4.3.tgz#f63ba2f07a1511772cdc7979733397df770aabc7"
@ -5583,7 +5514,7 @@ jest-snapshot@^22.4.3:
natural-compare "^1.4.0"
pretty-format "^22.4.3"
jest-util@^22.4.1, jest-util@^22.4.3:
jest-util@^22.4.3:
version "22.4.3"
resolved "https://registry.npmjs.org/jest-util/-/jest-util-22.4.3.tgz#c70fec8eec487c37b10b0809dc064a7ecf6aafac"
dependencies:
@ -5611,12 +5542,12 @@ jest-worker@^22.4.3:
dependencies:
merge-stream "^1.0.1"
jest@22.4.2:
version "22.4.2"
resolved "https://registry.npmjs.org/jest/-/jest-22.4.2.tgz#34012834a49bf1bdd3bc783850ab44e4499afc20"
jest@22.4.3:
version "22.4.3"
resolved "https://registry.npmjs.org/jest/-/jest-22.4.3.tgz#2261f4b117dc46d9a4a1a673d2150958dee92f16"
dependencies:
import-local "^1.0.0"
jest-cli "^22.4.2"
jest-cli "^22.4.3"
js-base64@^2.1.8, js-base64@^2.1.9:
version "2.4.3"
@ -5781,9 +5712,9 @@ jsonpointer@^4.0.0:
version "4.0.1"
resolved "https://registry.npmjs.org/jsonpointer/-/jsonpointer-4.0.1.tgz#4fd92cb34e0e9db3c89c8622ecf51f9b978c6cb9"
jsonwebtoken@8.2.0:
version "8.2.0"
resolved "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-8.2.0.tgz#690ec3a9e7e95e2884347ce3e9eb9d389aa598b3"
jsonwebtoken@8.2.1:
version "8.2.1"
resolved "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-8.2.1.tgz#333ee39aa8f238f32fa41693e7a2fb7e42f82b31"
dependencies:
jws "^3.1.4"
lodash.includes "^4.3.0"
@ -6601,7 +6532,7 @@ mv@~2:
ncp "~2.0.0"
rimraf "~2.4.0"
nan@^2.3.0, nan@^2.3.2, nan@^2.3.3:
nan@^2.10.0, nan@^2.3.0, nan@^2.3.3:
version "2.10.0"
resolved "https://registry.npmjs.org/nan/-/nan-2.10.0.tgz#96d0cd610ebd58d4b4de9cc0c6828cda99c7548f"
@ -6770,9 +6701,9 @@ node-pre-gyp@^0.6.39:
tar "^2.2.1"
tar-pack "^3.4.0"
node-sass@4.7.2:
version "4.7.2"
resolved "https://registry.npmjs.org/node-sass/-/node-sass-4.7.2.tgz#9366778ba1469eb01438a9e8592f4262bcb6794e"
node-sass@4.9.0:
version "4.9.0"
resolved "https://registry.npmjs.org/node-sass/-/node-sass-4.9.0.tgz#d1b8aa855d98ed684d6848db929a20771cc2ae52"
dependencies:
async-foreach "^0.1.3"
chalk "^1.1.1"
@ -6786,7 +6717,7 @@ node-sass@4.7.2:
lodash.mergewith "^4.6.0"
meow "^3.7.0"
mkdirp "^0.5.1"
nan "^2.3.2"
nan "^2.10.0"
node-gyp "^3.3.1"
npmlog "^4.0.0"
request "~2.79.0"
@ -7775,7 +7706,7 @@ prop-types@15.6.1, prop-types@^15.5.4, prop-types@^15.6.0:
loose-envify "^1.3.1"
object-assign "^4.1.1"
proxy-addr@~2.0.2, proxy-addr@~2.0.3:
proxy-addr@~2.0.3:
version "2.0.3"
resolved "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.3.tgz#355f262505a621646b3130a728eb647e22055341"
dependencies:
@ -8362,7 +8293,7 @@ request-promise-native@^1.0.5:
stealthy-require "^1.1.0"
tough-cookie ">=2.3.3"
request@2, request@^2.83.0:
request@2, request@2.85.0, request@^2.81.0, request@^2.83.0:
version "2.85.0"
resolved "https://registry.npmjs.org/request/-/request-2.85.0.tgz#5a03615a47c61420b3eb99b7dba204f83603e1fa"
dependencies:
@ -8416,33 +8347,6 @@ request@2.81.0:
tunnel-agent "^0.6.0"
uuid "^3.0.0"
request@2.83.0:
version "2.83.0"
resolved "https://registry.npmjs.org/request/-/request-2.83.0.tgz#ca0b65da02ed62935887808e6f510381034e3356"
dependencies:
aws-sign2 "~0.7.0"
aws4 "^1.6.0"
caseless "~0.12.0"
combined-stream "~1.0.5"
extend "~3.0.1"
forever-agent "~0.6.1"
form-data "~2.3.1"
har-validator "~5.0.3"
hawk "~6.0.2"
http-signature "~1.2.0"
is-typedarray "~1.0.0"
isstream "~0.1.2"
json-stringify-safe "~5.0.1"
mime-types "~2.1.17"
oauth-sign "~0.8.2"
performance-now "^2.1.0"
qs "~6.5.1"
safe-buffer "^5.1.1"
stringstream "~0.0.5"
tough-cookie "~2.3.3"
tunnel-agent "^0.6.0"
uuid "^3.1.0"
request@~2.79.0:
version "2.79.0"
resolved "https://registry.npmjs.org/request/-/request-2.79.0.tgz#4dfe5bf6be8b8cdc37fcf93e04b65577722710de"
@ -8731,24 +8635,6 @@ semver@~5.3.0:
version "5.3.0"
resolved "https://registry.npmjs.org/semver/-/semver-5.3.0.tgz#9b2ce5d3de02d17c6012ad326aa6b4d0cf54f94f"
send@0.16.1:
version "0.16.1"
resolved "https://registry.npmjs.org/send/-/send-0.16.1.tgz#a70e1ca21d1382c11d0d9f6231deb281080d7ab3"
dependencies:
debug "2.6.9"
depd "~1.1.1"
destroy "~1.0.4"
encodeurl "~1.0.1"
escape-html "~1.0.3"
etag "~1.8.1"
fresh "0.5.2"
http-errors "~1.6.2"
mime "1.4.1"
ms "2.0.0"
on-finished "~2.3.0"
range-parser "~1.2.0"
statuses "~1.3.1"
send@0.16.2:
version "0.16.2"
resolved "https://registry.npmjs.org/send/-/send-0.16.2.tgz#6ecca1e0f8c156d141597559848df64730a6bbc1"
@ -8783,15 +8669,6 @@ serve-index@^1.7.2:
mime-types "~2.1.17"
parseurl "~1.3.2"
serve-static@1.13.1:
version "1.13.1"
resolved "https://registry.npmjs.org/serve-static/-/serve-static-1.13.1.tgz#4c57d53404a761d8f2e7c1e8a18a47dbf278a719"
dependencies:
encodeurl "~1.0.1"
escape-html "~1.0.3"
parseurl "~1.3.2"
send "0.16.1"
serve-static@1.13.2:
version "1.13.2"
resolved "https://registry.npmjs.org/serve-static/-/serve-static-1.13.2.tgz#095e8472fd5b46237db50ce486a43f4b86c6cec1"
@ -9150,10 +9027,6 @@ static-extend@^0.1.1:
version "1.5.0"
resolved "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz#161c7dac177659fd9811f43771fa99381478628c"
statuses@~1.3.1:
version "1.3.1"
resolved "https://registry.npmjs.org/statuses/-/statuses-1.3.1.tgz#faf51b9eb74aaef3b3acf4ad5f61abf24cb7b93e"
statuses@~1.4.0:
version "1.4.0"
resolved "https://registry.npmjs.org/statuses/-/statuses-1.4.0.tgz#bb73d446da2796106efcc1b601a253d6c46bd087"
@ -10179,9 +10052,9 @@ webpack-cli@2.0.15:
yeoman-environment "^2.0.0"
yeoman-generator "^2.0.3"
webpack-dev-middleware@3.1.2:
version "3.1.2"
resolved "https://registry.npmjs.org/webpack-dev-middleware/-/webpack-dev-middleware-3.1.2.tgz#be4d0c36a4fa7d69d6904093418514caa9df3a40"
webpack-dev-middleware@3.1.3:
version "3.1.3"
resolved "https://registry.npmjs.org/webpack-dev-middleware/-/webpack-dev-middleware-3.1.3.tgz#8b32aa43da9ae79368c1bf1183f2b6cf5e1f39ed"
dependencies:
loud-rejection "^1.6.0"
memory-fs "~0.4.1"
@ -10191,9 +10064,9 @@ webpack-dev-middleware@3.1.2:
url-join "^4.0.0"
webpack-log "^1.0.1"
webpack-dev-server@3.1.3:
version "3.1.3"
resolved "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-3.1.3.tgz#5cecfd8a9d60c4638284813f1cf9562f04e5c1c5"
webpack-dev-server@3.1.4:
version "3.1.4"
resolved "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-3.1.4.tgz#9a08d13c4addd1e3b6d8ace116e86715094ad5b4"
dependencies:
ansi-html "0.0.7"
array-includes "^3.0.3"
@ -10220,7 +10093,7 @@ webpack-dev-server@3.1.3:
spdy "^3.4.1"
strip-ansi "^3.0.0"
supports-color "^5.1.0"
webpack-dev-middleware "3.1.2"
webpack-dev-middleware "3.1.3"
webpack-log "^1.1.2"
yargs "11.0.0"