From 454af7c0bb7366a431a9041e1f9f4949d108dbfc Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 27 Jul 2021 15:07:09 +0000 Subject: [PATCH] fix: mo2front/package.json & mo2front/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-1018905 - https://snyk.io/vuln/SNYK-JS-LODASH-1040724 --- mo2front/package-lock.json | 139 ++++++++++++++----------------------- mo2front/package.json | 2 +- 2 files changed, 54 insertions(+), 87 deletions(-) diff --git a/mo2front/package-lock.json b/mo2front/package-lock.json index 1b2d5fde..8f8ea32e 100644 --- a/mo2front/package-lock.json +++ b/mo2front/package-lock.json @@ -5,6 +5,7 @@ "requires": true, "packages": { "": { + "name": "mo2front", "version": "0.2.11", "dependencies": { "@pwabuilder/pwainstall": "^1.6.7", @@ -45,7 +46,7 @@ "vue-cropper": "^0.5.6", "vue-property-decorator": "^9.1.2", "vue-router": "^3.2.0", - "vue2-timeago": "^2.0.0-beta.5", + "vue2-timeago": "^2.0.0", "vuelidate": "^0.7.6", "vuetify": "^2.4.6", "vuex": "^3.4.0", @@ -1268,12 +1269,14 @@ } }, "node_modules/@babel/runtime": { - "version": "7.12.13", - "resolved": "https://registry.npm.taobao.org/@babel/runtime/download/@babel/runtime-7.12.13.tgz", - "integrity": "sha1-CiFFI1KwJULbD/uSisLTyny21m0=", - "dev": true, + "version": "7.14.8", + "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.14.8.tgz", + "integrity": "sha512-twj3L8Og5SaCRCErB4x4ajbvBIVV77CGeFglHpeg5WC5FF8TZzBWXtTJ4MqaD9QszLYTtr+IsaAL2rEUevb+eg==", "dependencies": { "regenerator-runtime": "^0.13.4" + }, + "engines": { + "node": ">=6.9.0" } }, "node_modules/@babel/runtime-corejs2": { @@ -11346,9 +11349,9 @@ } }, "node_modules/lodash": { - "version": "4.17.20", - "resolved": "https://registry.npm.taobao.org/lodash/download/lodash-4.17.20.tgz?cache=0&sync_timestamp=1597336196663&other_urls=https%3A%2F%2Fregistry.npm.taobao.org%2Flodash%2Fdownload%2Flodash-4.17.20.tgz", - "integrity": "sha1-tEqbYpe8tpjxxRo1RaKzs2jVnFI=" + "version": "4.17.21", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", + "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==" }, "node_modules/lodash._reinterpolate": { "version": "3.0.0", @@ -17703,13 +17706,14 @@ } }, "node_modules/v-tooltip": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/v-tooltip/-/v-tooltip-2.1.2.tgz", - "integrity": "sha512-6c4NotnvDvinmZnBiqW50Rn6Q3MMk+pUV9Nla+JHkgJulgXh5snrU3RYbIZVf9p2ZlFoaZL/3QhTNgcQIc2GFQ==", + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/v-tooltip/-/v-tooltip-2.1.3.tgz", + "integrity": "sha512-xXngyxLQTOx/yUEy50thb8te7Qo4XU6h4LZB6cvEfVd9mnysUxLEoYwGWDdqR+l69liKsy3IPkdYff3J1gAJ5w==", "dependencies": { - "lodash": "^4.17.15", - "popper.js": "^1.16.0", - "vue-resize": "^1.0.0" + "@babel/runtime": "^7.13.10", + "lodash": "^4.17.21", + "popper.js": "^1.16.1", + "vue-resize": "^1.0.1" } }, "node_modules/v8-compile-cache": { @@ -17925,9 +17929,12 @@ } }, "node_modules/vue-resize": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/vue-resize/-/vue-resize-1.0.0.tgz", - "integrity": "sha512-SkIi19neeJClapYavfmHiewFZkkTfITVWskg/dIL8b1Eb+RlvnCb8fjGUwLjQJmsw2qsRiiAo4o7BAJVM4pcOA==", + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/vue-resize/-/vue-resize-1.0.1.tgz", + "integrity": "sha512-z5M7lJs0QluJnaoMFTIeGx6dIkYxOwHThlZDeQnWZBizKblb99GSejPnK37ZbNE/rVwDcYcHY+Io+AxdpY952w==", + "dependencies": { + "@babel/runtime": "^7.13.10" + }, "peerDependencies": { "vue": "^2.6.0" } @@ -17970,35 +17977,12 @@ "dev": true }, "node_modules/vue2-timeago": { - "version": "2.0.0-beta.5", - "resolved": "https://registry.npmjs.org/vue2-timeago/-/vue2-timeago-2.0.0-beta.5.tgz", - "integrity": "sha512-WVjddNI2vgt6DBGXqAOZsP/P0HPRMAYAQuHv2cQ6MIACaXzH1JyPmTi9ETAtD4GaEm+1ytGFL2IP00e+2jl3Vg==", - "dependencies": { - "v-tooltip": "^2.1.2", - "vue2-timeago": "2.0.0-beta.4" - }, - "peerDependencies": { - "v-tooltip": "^2.1.2" - } - }, - "node_modules/vue2-timeago/node_modules/vue2-timeago": { - "version": "2.0.0-beta.4", - "resolved": "https://registry.npmjs.org/vue2-timeago/-/vue2-timeago-2.0.0-beta.4.tgz", - "integrity": "sha512-r502MPBfr5MEquSFR9UUJFU5UJ0xdZiOerN6IqleZnUmg1Ihu5g30cGfRVcUhL89nDRtux+YhjJLxvDNZYNqPA==", + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/vue2-timeago/-/vue2-timeago-2.0.0.tgz", + "integrity": "sha512-TNBuBR4h3+EZirwkqLp+3PPdBtrEs60p92Rhjapl/lvYsXQZN82szGkbA+ZT47AtAfJ6KUWYtZCfGt/UdIDtMQ==", "dependencies": { "v-tooltip": "^2.1.2", - "vue2-timeago": "2.0.0-beta.3" - }, - "peerDependencies": { - "v-tooltip": "^2.1.2" - } - }, - "node_modules/vue2-timeago/node_modules/vue2-timeago/node_modules/vue2-timeago": { - "version": "2.0.0-beta.3", - "resolved": "https://registry.npmjs.org/vue2-timeago/-/vue2-timeago-2.0.0-beta.3.tgz", - "integrity": "sha512-XL0e/pbsWjuaYeqIFYO9EMBNRgksqTm4HgxYV8mg7Uo2Vj/koYRSHs7VF7NLuzcQpABPozXME23oVXzMlQkuqg==", - "dependencies": { - "v-tooltip": "^2.1.2" + "vue2-timeago": "2.0.0" }, "peerDependencies": { "v-tooltip": "^2.1.2" @@ -19152,6 +19136,7 @@ "version": "7.4.3", "resolved": "https://registry.npm.taobao.org/ws/download/ws-7.4.3.tgz", "integrity": "sha1-H5ZD3jSlQ7jtsSS9y8RXrlWm5c0=", + "devOptional": true, "engines": { "node": ">=8.3.0" }, @@ -20518,10 +20503,9 @@ } }, "@babel/runtime": { - "version": "7.12.13", - "resolved": "https://registry.npm.taobao.org/@babel/runtime/download/@babel/runtime-7.12.13.tgz", - "integrity": "sha1-CiFFI1KwJULbD/uSisLTyny21m0=", - "dev": true, + "version": "7.14.8", + "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.14.8.tgz", + "integrity": "sha512-twj3L8Og5SaCRCErB4x4ajbvBIVV77CGeFglHpeg5WC5FF8TZzBWXtTJ4MqaD9QszLYTtr+IsaAL2rEUevb+eg==", "requires": { "regenerator-runtime": "^0.13.4" } @@ -28465,9 +28449,9 @@ } }, "lodash": { - "version": "4.17.20", - "resolved": "https://registry.npm.taobao.org/lodash/download/lodash-4.17.20.tgz?cache=0&sync_timestamp=1597336196663&other_urls=https%3A%2F%2Fregistry.npm.taobao.org%2Flodash%2Fdownload%2Flodash-4.17.20.tgz", - "integrity": "sha1-tEqbYpe8tpjxxRo1RaKzs2jVnFI=" + "version": "4.17.21", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", + "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==" }, "lodash._reinterpolate": { "version": "3.0.0", @@ -33636,13 +33620,14 @@ } }, "v-tooltip": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/v-tooltip/-/v-tooltip-2.1.2.tgz", - "integrity": "sha512-6c4NotnvDvinmZnBiqW50Rn6Q3MMk+pUV9Nla+JHkgJulgXh5snrU3RYbIZVf9p2ZlFoaZL/3QhTNgcQIc2GFQ==", + "version": "2.1.3", + "resolved": "https://registry.npmjs.org/v-tooltip/-/v-tooltip-2.1.3.tgz", + "integrity": "sha512-xXngyxLQTOx/yUEy50thb8te7Qo4XU6h4LZB6cvEfVd9mnysUxLEoYwGWDdqR+l69liKsy3IPkdYff3J1gAJ5w==", "requires": { - "lodash": "^4.17.15", - "popper.js": "^1.16.0", - "vue-resize": "^1.0.0" + "@babel/runtime": "^7.13.10", + "lodash": "^4.17.21", + "popper.js": "^1.16.1", + "vue-resize": "^1.0.1" } }, "v8-compile-cache": { @@ -33808,10 +33793,12 @@ "requires": {} }, "vue-resize": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/vue-resize/-/vue-resize-1.0.0.tgz", - "integrity": "sha512-SkIi19neeJClapYavfmHiewFZkkTfITVWskg/dIL8b1Eb+RlvnCb8fjGUwLjQJmsw2qsRiiAo4o7BAJVM4pcOA==", - "requires": {} + "version": "1.0.1", + "resolved": "https://registry.npmjs.org/vue-resize/-/vue-resize-1.0.1.tgz", + "integrity": "sha512-z5M7lJs0QluJnaoMFTIeGx6dIkYxOwHThlZDeQnWZBizKblb99GSejPnK37ZbNE/rVwDcYcHY+Io+AxdpY952w==", + "requires": { + "@babel/runtime": "^7.13.10" + } }, "vue-router": { "version": "3.5.1", @@ -33853,33 +33840,12 @@ "dev": true }, "vue2-timeago": { - "version": "2.0.0-beta.5", - "resolved": "https://registry.npmjs.org/vue2-timeago/-/vue2-timeago-2.0.0-beta.5.tgz", - "integrity": "sha512-WVjddNI2vgt6DBGXqAOZsP/P0HPRMAYAQuHv2cQ6MIACaXzH1JyPmTi9ETAtD4GaEm+1ytGFL2IP00e+2jl3Vg==", + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/vue2-timeago/-/vue2-timeago-2.0.0.tgz", + "integrity": "sha512-TNBuBR4h3+EZirwkqLp+3PPdBtrEs60p92Rhjapl/lvYsXQZN82szGkbA+ZT47AtAfJ6KUWYtZCfGt/UdIDtMQ==", "requires": { "v-tooltip": "^2.1.2", - "vue2-timeago": "2.0.0-beta.4" - }, - "dependencies": { - "vue2-timeago": { - "version": "2.0.0-beta.4", - "resolved": "https://registry.npmjs.org/vue2-timeago/-/vue2-timeago-2.0.0-beta.4.tgz", - "integrity": "sha512-r502MPBfr5MEquSFR9UUJFU5UJ0xdZiOerN6IqleZnUmg1Ihu5g30cGfRVcUhL89nDRtux+YhjJLxvDNZYNqPA==", - "requires": { - "v-tooltip": "^2.1.2", - "vue2-timeago": "2.0.0-beta.3" - }, - "dependencies": { - "vue2-timeago": { - "version": "2.0.0-beta.3", - "resolved": "https://registry.npmjs.org/vue2-timeago/-/vue2-timeago-2.0.0-beta.3.tgz", - "integrity": "sha512-XL0e/pbsWjuaYeqIFYO9EMBNRgksqTm4HgxYV8mg7Uo2Vj/koYRSHs7VF7NLuzcQpABPozXME23oVXzMlQkuqg==", - "requires": { - "v-tooltip": "^2.1.2" - } - } - } - } + "vue2-timeago": "2.0.0" } }, "vuelidate": { @@ -34831,6 +34797,7 @@ "version": "7.4.3", "resolved": "https://registry.npm.taobao.org/ws/download/ws-7.4.3.tgz", "integrity": "sha1-H5ZD3jSlQ7jtsSS9y8RXrlWm5c0=", + "devOptional": true, "requires": {} }, "xml-name-validator": { diff --git a/mo2front/package.json b/mo2front/package.json index e96b7b5e..3740ba8a 100644 --- a/mo2front/package.json +++ b/mo2front/package.json @@ -57,7 +57,7 @@ "vue-cropper": "^0.5.6", "vue-property-decorator": "^9.1.2", "vue-router": "^3.2.0", - "vue2-timeago": "^2.0.0-beta.5", + "vue2-timeago": "^2.0.0", "vuelidate": "^0.7.6", "vuetify": "^2.4.6", "vuex": "^3.4.0",