From f8d19f97a4e024bbd41aa21968398074d7c26f42 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 18 Jan 2022 17:09:12 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NODEFETCH-2342118 --- package-lock.json | 6 +++--- package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 6c23298..3435f4a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1586,9 +1586,9 @@ "dev": true }, "node-fetch": { - "version": "2.6.5", - "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.5.tgz", - "integrity": "sha512-mmlIVHJEu5rnIxgEgez6b9GgWXbkZj5YZ7fx+2r94a2E+Uirsp6HsPTPlomfdHtpt/B0cdKviwkoaM6pyvUOpQ==", + "version": "2.6.7", + "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz", + "integrity": "sha512-ZjMPFEfVx5j+y2yF35Kzx5sF7kDzxuDj6ziH4FFbOp87zKDZNx8yExJIb05OGF4Nlt9IHFIMBkRl41VdvcNdbQ==", "requires": { "whatwg-url": "^5.0.0" } diff --git a/package.json b/package.json index ff7f7f1..88c04ec 100644 --- a/package.json +++ b/package.json @@ -4,7 +4,7 @@ "description": "A simple command-line utility that lets you follow redirects to see where http URLs end up. Useful for shortened URLs.", "main": "lib.js", "dependencies": { - "node-fetch": "^2.6.5" + "node-fetch": "^2.6.7" }, "devDependencies": { "chai": "^4.3.4",