Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade meow, nyc, and xo #22

Merged
merged 1 commit into from Apr 19, 2022
Merged

Upgrade meow, nyc, and xo #22

merged 1 commit into from Apr 19, 2022

Conversation

magicfoodhand
Copy link
Contributor

@magicfoodhand magicfoodhand commented Apr 10, 2022

@bokub
Copy link
Owner

bokub commented Apr 14, 2022

Hello,

Only the .end() function of trim-newlines is affected by a security problem.

  1. I use meow, which doesn't use .end() as you can see here
  2. Even if it did, the security issue about the a ReDoS. I don't understand how you could perform a ReDos on a CLI tool.

@bokub
Copy link
Owner

bokub commented Apr 14, 2022

However, thank you for the PR ! Please don't close it, I'll merge it then also upgrade ava, gradient-string and chalk, but maybe not today

@bokub bokub merged commit 910d0b0 into bokub:master Apr 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants