Skip to content

Commit e03bf01

Browse files
committed
Security fix to remove the xmldom transitive dependency
1 parent f67e09e commit e03bf01

File tree

3 files changed

+3
-60
lines changed

3 files changed

+3
-60
lines changed

package.json

-1
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,6 @@
4040
"get-urls": "^10.0.0",
4141
"request": "https://github.com/request/request/archive/392db7d127536ff296fb06492db9430790a32d6c.tar.gz",
4242
"semver": "^5.3.0",
43-
"skills-validator": "file:./vendor/skills-validator-1.0.0.tgz",
4443
"stream-buffers": "^3.0.1",
4544
"ts-node": "^8.8.2",
4645
"typescript": "^3.7.5",

vendor/skills-validator-1.0.0.tgz

-57.2 KB
Binary file not shown.

yarn.lock

+3-59
Original file line numberDiff line numberDiff line change
@@ -283,14 +283,6 @@
283283
resolved "https://registry.yarnpkg.com/@types/mocha/-/mocha-2.2.48.tgz#3523b126a0b049482e1c3c11877460f76622ffab"
284284
integrity sha512-nlK/iyETgafGli8Zh9zJVCTicvU3iajSkRwOh3Hhiva598CMqNJ4NcVCGMTGKpGpTYj/9R8RLzS9NAykSSCqGw==
285285

286-
"@types/node-fetch@^2.5.4":
287-
version "2.5.8"
288-
resolved "https://registry.yarnpkg.com/@types/node-fetch/-/node-fetch-2.5.8.tgz#e199c835d234c7eb0846f6618012e558544ee2fb"
289-
integrity sha512-fbjI6ja0N5ZA8TV53RUqzsKNkl9fv8Oj3T7zxW7FGv1GSH7gwJaNF8dzCjrqKaxKeUpTz4yT1DaJFq/omNpGfw==
290-
dependencies:
291-
"@types/node" "*"
292-
form-data "^3.0.0"
293-
294286
"@types/node@*", "@types/node@^13.11.0":
295287
version "13.11.0"
296288
resolved "https://registry.yarnpkg.com/@types/node/-/node-13.11.0.tgz#390ea202539c61c8fa6ba4428b57e05bc36dc47b"
@@ -301,11 +293,6 @@
301293
resolved "https://registry.yarnpkg.com/@types/node/-/node-14.14.22.tgz#0d29f382472c4ccf3bd96ff0ce47daf5b7b84b18"
302294
integrity sha512-g+f/qj/cNcqKkc3tFqlXOYjrmZA+jNBiDzbP3kH+B+otKFqAdPgVTGP1IeKRdMml/aE69as5S4FqtxAbl+LaMw==
303295

304-
"@types/node@^8.0.47":
305-
version "8.10.66"
306-
resolved "https://registry.yarnpkg.com/@types/node/-/node-8.10.66.tgz#dd035d409df322acc83dff62a602f12a5783bbb3"
307-
integrity sha512-tktOkFUA4kXx2hhhrB8bIFb5TbwzS4uOhKEmwiD+NoiL0qtP2OQ9mFldbgD4dV1djrlBYP6eBuQZiWjuHUpqFw==
308-
309296
"@types/node@^9.6.1":
310297
version "9.6.55"
311298
resolved "https://registry.yarnpkg.com/@types/node/-/node-9.6.55.tgz#7cc1358c9c18e71f6c020e410962971863232cf5"
@@ -842,21 +829,6 @@ accepts@~1.3.7:
842829
mime-types "~2.1.24"
843830
negotiator "0.6.2"
844831

845-
adal-node@^0.2.1:
846-
version "0.2.1"
847-
resolved "https://registry.yarnpkg.com/adal-node/-/adal-node-0.2.1.tgz#19e401bd579977448c1a77ce0e5b4c9accdc334e"
848-
integrity sha512-C/oasZuTy0NIqh5wPWjG/09XaG+zS7elC8upf1ZVExt9lSRncme4Ejbx8CKYk+wsGgj609y84txtRAXQVvqApg==
849-
dependencies:
850-
"@types/node" "^8.0.47"
851-
async "^2.6.3"
852-
date-utils "*"
853-
jws "3.x.x"
854-
request "^2.88.0"
855-
underscore ">= 1.3.1"
856-
uuid "^3.1.0"
857-
xmldom ">= 0.1.x"
858-
xpath.js "~1.1.0"
859-
860832
agent-base@6:
861833
version "6.0.1"
862834
resolved "https://registry.yarnpkg.com/agent-base/-/agent-base-6.0.1.tgz#808007e4e5867decb0ab6ab2f928fbdb5a596db4"
@@ -1087,7 +1059,7 @@ async@^1.5.2:
10871059
resolved "https://registry.yarnpkg.com/async/-/async-1.5.2.tgz#ec6a61ae56480c0c3cb241c95618e20892f9672a"
10881060
integrity sha1-7GphrlZIDAw8skHJVhjiCJL5Zyo=
10891061

1090-
async@^2.6.1, async@^2.6.3:
1062+
async@^2.6.1:
10911063
version "2.6.3"
10921064
resolved "https://registry.yarnpkg.com/async/-/async-2.6.3.tgz#d72625e2344a3656e3a3ad4fa749fa83299d82ff"
10931065
integrity sha512-zflvls11DCy+dQWzTW2dzuilv8Z5X/pjfmZOWba6TNIVDm+2UDaJmXSOXlasHKfNBs8oo3M0aT50fDEWfKZjXg==
@@ -1730,11 +1702,6 @@ date-and-time@^0.14.0:
17301702
resolved "https://registry.yarnpkg.com/date-and-time/-/date-and-time-0.14.2.tgz#a4266c3dead460f6c231fe9674e585908dac354e"
17311703
integrity sha512-EFTCh9zRSEpGPmJaexg7HTuzZHh6cnJj1ui7IGCFNXzd2QdpsNh05Db5TF3xzJm30YN+A8/6xHSuRcQqoc3kFA==
17321704

1733-
date-utils@*:
1734-
version "1.2.21"
1735-
resolved "https://registry.yarnpkg.com/date-utils/-/date-utils-1.2.21.tgz#61fb16cdc1274b3c9acaaffe9fc69df8720a2b64"
1736-
integrity sha1-YfsWzcEnSzyayq/+n8ad+HIKK2Q=
1737-
17381705
dayjs@^1.8.19, dayjs@^1.8.21:
17391706
version "1.8.23"
17401707
resolved "https://registry.yarnpkg.com/dayjs/-/dayjs-1.8.23.tgz#07b5a8e759c4d75ae07bdd0ad6977f851c01e510"
@@ -2999,7 +2966,7 @@ jwa@^2.0.0:
29992966
ecdsa-sig-formatter "1.0.11"
30002967
safe-buffer "^5.0.1"
30012968

3002-
jws@3.x.x, jws@^3.2.2:
2969+
jws@^3.2.2:
30032970
version "3.2.2"
30042971
resolved "https://registry.yarnpkg.com/jws/-/jws-3.2.2.tgz#001099f3639468c9414000e99995fa52fb478304"
30052972
integrity sha512-YHlZCB6lMTllWDtSPHz/ZXTsi8S00usEV6v1tjq8tOUZzw7DpSDWVXjXDre6ed1w/pd495ODpHZYSdkRTsa0HA==
@@ -3559,7 +3526,7 @@ [email protected]:
35593526
object.getownpropertydescriptors "^2.0.3"
35603527
semver "^5.7.0"
35613528

3562-
node-fetch@^2.3.0, node-fetch@^2.6.0, node-fetch@^2.6.1:
3529+
node-fetch@^2.3.0, node-fetch@^2.6.1:
35633530
version "2.6.1"
35643531
resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.1.tgz#045bd323631f76ed2e2b55573394416b639a0052"
35653532
integrity sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw==
@@ -4473,14 +4440,6 @@ sisteransi@^1.0.0:
44734440
resolved "https://registry.yarnpkg.com/sisteransi/-/sisteransi-1.0.5.tgz#134d681297756437cc05ca01370d3a7a571075ed"
44744441
integrity sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg==
44754442

4476-
"skills-validator@file:./vendor/skills-validator-1.0.0.tgz":
4477-
version "1.0.0"
4478-
resolved "file:./vendor/skills-validator-1.0.0.tgz#70d30269e20b283770a18c3562ea58e45eef9a13"
4479-
dependencies:
4480-
"@types/node-fetch" "^2.5.4"
4481-
adal-node "^0.2.1"
4482-
node-fetch "^2.6.0"
4483-
44844443
snakeize@^0.1.0:
44854444
version "0.1.0"
44864445
resolved "https://registry.yarnpkg.com/snakeize/-/snakeize-0.1.0.tgz#10c088d8b58eb076b3229bb5a04e232ce126422d"
@@ -4920,11 +4879,6 @@ undefsafe@^2.0.2:
49204879
dependencies:
49214880
debug "^2.2.0"
49224881

4923-
"underscore@>= 1.3.1":
4924-
version "1.12.0"
4925-
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.0.tgz#4814940551fc80587cef7840d1ebb0f16453be97"
4926-
integrity sha512-21rQzss/XPMjolTiIezSu3JAjgagXKROtNrYFEOWK109qY1Uv2tVjPTZ1ci2HgvQDA16gHYSthQIJfB+XId/rQ==
4927-
49284882
underscore@^1.8.3:
49294883
version "1.10.2"
49304884
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.10.2.tgz#73d6aa3668f3188e4adb0f1943bd12cfd7efaaaf"
@@ -5231,16 +5185,6 @@ xmlbuilder@^9.0.7:
52315185
resolved "https://registry.yarnpkg.com/xmlbuilder/-/xmlbuilder-9.0.7.tgz#132ee63d2ec5565c557e20f4c22df9aca686b10d"
52325186
integrity sha1-Ey7mPS7FVlxVfiD0wi35rKaGsQ0=
52335187

5234-
"xmldom@>= 0.1.x":
5235-
version "0.4.0"
5236-
resolved "https://registry.yarnpkg.com/xmldom/-/xmldom-0.4.0.tgz#8771e482a333af44587e30ce026f0998c23f3830"
5237-
integrity sha512-2E93k08T30Ugs+34HBSTQLVtpi6mCddaY8uO+pMNk1pqSjV5vElzn4mmh6KLxN3hki8rNcHSYzILoh3TEWORvA==
5238-
5239-
xpath.js@~1.1.0:
5240-
version "1.1.0"
5241-
resolved "https://registry.yarnpkg.com/xpath.js/-/xpath.js-1.1.0.tgz#3816a44ed4bb352091083d002a383dd5104a5ff1"
5242-
integrity sha512-jg+qkfS4K8E7965sqaUl8mRngXiKb3WZGfONgE18pr03FUQiuSV6G+Ej4tS55B+rIQSFEIw3phdVAQ4pPqNWfQ==
5243-
52445188
"xtend@>=4.0.0 <4.1.0-0", xtend@^4.0.0, xtend@^4.0.1:
52455189
version "4.0.2"
52465190
resolved "https://registry.yarnpkg.com/xtend/-/xtend-4.0.2.tgz#bb72779f5fa465186b1f438f674fa347fdb5db54"

0 commit comments

Comments
 (0)