Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update validator dependency #6

Open
pdehaan opened this issue Oct 28, 2014 · 1 comment
Open

Update validator dependency #6

pdehaan opened this issue Oct 28, 2014 · 1 comment

Comments

@pdehaan
Copy link

pdehaan commented Oct 28, 2014

See https://nodesecurity.io/advisories/validator_XSS_Filter_Bypass_via_Encoded_URL

@pdehaan
Copy link
Author

pdehaan commented Oct 28, 2014

Here was my full install log:

$ git clone https://github.com/shaunakv1/easypack.git .

$ npm install

$ npm shrinkwrap --dev
wrote npm-shrinkwrap.json

$ # sudo npm i nsp -g
$ nsp audit-shrinkwrap
Name       Installed  Patched  Vulnerable Dependency
validator    1.4.0    >=2.0.0  easypack

$ npm outdated --depth 0
Package    Current  Wanted  Latest  Location
cheerio     0.12.4  0.12.4  0.17.0  cheerio
uglify-js    2.3.6   2.3.6  2.4.15  uglify-js
uglifycss    0.0.5   0.0.5   0.0.9  uglifycss
validator    1.4.0   1.4.0  3.22.0  validator

# .travis.yml not found

$ # sudo npm i package-json-validator -g
$ pjv -wr
{ valid: true,
  warnings: [ 'Missing recommended field: contributors' ],
  recommendations:
   [ 'Missing optional field: homepage',
     'Missing optional field: engines' ] }

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant