From 554d7362e58cac57d163b3d02d362ccf6e96e3d9 Mon Sep 17 00:00:00 2001 From: Carlos Alcaide Date: Thu, 23 Sep 2021 11:53:27 +0200 Subject: [PATCH] =?UTF-8?q?chore:=20=F0=9F=A4=96=20Add=20ntch-check=20to?= =?UTF-8?q?=20resolutions?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Add nth-check to yarn resolutions to avoid security vulnerability --- package.json | 3 ++- yarn.lock | 17 +++++------------ 2 files changed, 7 insertions(+), 13 deletions(-) diff --git a/package.json b/package.json index e00821038..09499092e 100755 --- a/package.json +++ b/package.json @@ -77,7 +77,8 @@ "normalize-url": "^4.5.1", "glob-parent": "^5.1.2", "tar": "^6.1.9", - "path-parse": "^1.0.7" + "path-parse": "^1.0.7", + "nth-check": "^2.0.1" }, "config": { "commitizen": { diff --git a/yarn.lock b/yarn.lock index c37dd4486..da1ab72c3 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5537,7 +5537,7 @@ boilerplate-update@0.37.4: tmp "0.1.0" which "^2.0.1" -boolbase@^1.0.0, boolbase@~1.0.0: +boolbase@^1.0.0: version "1.0.0" resolved "https://registry.yarnpkg.com/boolbase/-/boolbase-1.0.0.tgz#68dff5fbe60c51eb37725ea9e3ed310dcc1e776e" integrity sha1-aN/1++YMUes3cl6p4+0xDcwed24= @@ -16324,17 +16324,10 @@ npx@^10.2.0: libnpx "10.2.2" npm "5.1.0" -nth-check@^1.0.2: - version "1.0.2" - resolved "https://registry.yarnpkg.com/nth-check/-/nth-check-1.0.2.tgz#b2bd295c37e3dd58a3bf0700376663ba4d9cf05c" - integrity sha512-WeBOdju8SnzPN5vTUJYxYUxLeXpCaVP5i5e0LF8fg7WORF2Wd7wFX/pk0tYZk7s8T+J7VLy0Da6J1+wCT0AtHg== - dependencies: - boolbase "~1.0.0" - -nth-check@^2.0.0: - version "2.0.0" - resolved "https://registry.yarnpkg.com/nth-check/-/nth-check-2.0.0.tgz#1bb4f6dac70072fc313e8c9cd1417b5074c0a125" - integrity sha512-i4sc/Kj8htBrAiH1viZ0TgU8Y5XqCaV/FziYK6TBczxmeKm3AEFWqqF3195yKudrarqy7Zu80Ra5dobFjn9X/Q== +nth-check@^1.0.2, nth-check@^2.0.0, nth-check@^2.0.1: + version "2.0.1" + resolved "https://registry.yarnpkg.com/nth-check/-/nth-check-2.0.1.tgz#2efe162f5c3da06a28959fbd3db75dbeea9f0fc2" + integrity sha512-it1vE95zF6dTT9lBsYbxvqh0Soy4SPowchj0UBGj/V6cTPnXXtQOPUbhZ6CmGzAD/rW22LQK6E96pcdJXk4A4w== dependencies: boolbase "^1.0.0"