[Snyk] Upgrade np from 7.6.2 to 10.0.6 #18

Chere3 · 2024-07-10T09:22:19Z

This PR was automatically created by Snyk using the credentials of a real user.

![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade np from 7.6.2 to 10.0.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

The recommended version is 18 versions ahead of your current version.
The recommended version was released on 21 days ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Uncontrolled resource consumption SNYK-JS-BRACES-6838727	482	Proof of Concept
Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	482	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482	Proof of Concept
Open Redirect SNYK-JS-GOT-2932019	482	No Known Exploit
Open Redirect SNYK-JS-GOT-2932019	482	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	482	Proof of Concept

Release notes

Package name: np

10.0.6 - 2024-06-19
- Fix usage with pnpm and --any-branch or --branch (#745) d0c1493
v10.0.5...v10.0.6
10.0.5 - 2024-04-19
- Fix npm 10 compatibility for real (#744) 34409be
v10.0.4...v10.0.5
10.0.4 - 2024-04-17
- Fix compatibility with npm 10 (#743) 4caa295
v10.0.3...v10.0.4
10.0.3 - 2024-04-07
- Fix publish OTP for Yarn Berry (#741) 02f60c7
v10.0.2...v10.0.3
10.0.2 - 2024-03-24
- Use npm for tagging versions when pnpm is the chosen package manager (#739) 770418f
v10.0.1...v10.0.2
10.0.1 - 2024-03-13
- Fix compatibility with npm 10 (#737) 9fdebd5
v10.0.0...v10.0.1
10.0.0 - 2024-02-26
Breaking
- Remove the --yarn flag (#730) 4b3b599
  - The functionality is replaced by --package-manager. See below.
Improvements
- Add --package-manager flag (#730) 4b3b599
  - This acts like the packageManager field in package.json. np will default to reading package.json, and look for lockfiles to determine the best package manager as a last resort.
- Add pnpm support (#730) 4b3b599
v9.2.0...v10.0.0
9.2.0 - 2023-12-09
- Fix yarn npm publish for scoped packages 8d3a984
- Fix broken revert code after publish failure 819ed29
v9.1.0...v9.2.0
9.1.0 - 2023-12-05
- Add Yarn Berry support (#723) 0d9522b
v9.0.0...v9.1.0
9.0.0 - 2023-11-27
Breaking
- Require Node.js 18 and npm 9 6c2e00e
Improvements
- Group unpublished files in folders (#716) c31c2bc
- improve messages related to new files and dependencies (#702) ad7b09e
v8.0.4...v9.0.0
8.0.4 - 2023-06-12
8.0.3 - 2023-06-11
8.0.2 - 2023-05-30
8.0.1 - 2023-05-28
8.0.0 - 2023-05-27
7.7.0 - 2023-03-30
7.6.4 - 2023-03-20
7.6.3 - 2022-12-27
7.6.2 - 2022-06-22

from np GitHub release notes

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade np from 7.6.2 to 10.0.6. See this package in npm: np See this project in Snyk: https://app.snyk.io/org/chere3/project/a89e8a75-4f80-4ef9-a3ba-727fc1a20520?utm_source=github&utm_medium=referral&page=upgrade-pr

socket-security · 2024-07-10T09:23:33Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@sindresorhus/is@5.6.0	None	`0`	61.3 kB	sindresorhus
npm/@szmarczak/http-timer@5.0.1	None	`0`	10.2 kB	szmarczak
npm/@types/http-cache-semantics@4.0.4	None	`0`	9.28 kB	types
npm/@types/normalize-package-data@2.4.4	None	`0`	5.81 kB	types
npm/aggregate-error@4.0.1	None	`+1`	11.2 kB	sindresorhus
npm/boxen@7.1.1	None	`+6`	279 kB	sindresorhus
npm/cacheable-lookup@7.0.0	None	`0`	25.2 kB	sindresorhus
npm/cacheable-request@10.2.14	None	`+1`	81.3 kB	jaredwray
npm/camelcase@7.0.1	None	`0`	11.7 kB	sindresorhus
npm/chalk@5.3.0	None	`0`	43.7 kB	sindresorhus
npm/clean-stack@4.2.0	None	`0`	6.76 kB	sindresorhus
npm/cli-boxes@3.0.0	None	`0`	6.62 kB	sindresorhus
npm/configstore@6.0.0	None	`0`	7.58 kB	sindresorhus
npm/cosmiconfig@8.3.6	filesystem Transitive: environment	`+3`	660 kB	d-fischer
npm/crypto-random-string@4.0.0	None	`+1`	157 kB	sindresorhus
npm/decompress-response@6.0.0	None	`+1`	11.5 kB	sindresorhus
npm/del@7.1.0	Transitive: environment, filesystem	`+10`	168 kB	sindresorhus
npm/escape-goat@4.0.0	None	`0`	6.28 kB	sindresorhus
npm/escape-string-regexp@5.0.0	None	`0`	3.66 kB	sindresorhus
npm/execa@8.0.1	environment Transitive: filesystem, shell	`+7`	138 kB	ehmicky
npm/fast-glob@3.3.2	filesystem	`+13`	464 kB	mrmlnc
npm/get-stream@8.0.1	None	`0`	25.2 kB	ehmicky
npm/globby@13.2.2	Transitive: filesystem	`+2`	36 kB	sindresorhus
npm/got@12.6.1	Transitive: network	`+4`	375 kB	sindresorhus
npm/graceful-fs@4.2.11	environment, filesystem	`0`	32.5 kB	isaacs
npm/hosted-git-info@7.0.2	None	`0`	26.6 kB	npm-cli-ops
npm/http-cache-semantics@4.1.1	None	`0`	35.9 kB	kornel
npm/human-signals@5.0.0	None	`0`	26 kB	ehmicky
npm/ignore-walk@6.0.5	filesystem	`0`	13.2 kB	npm-cli-ops
npm/ignore@5.3.1	None	`0`	51.5 kB	kael
npm/import-lazy@4.0.0	None	`0`	4.9 kB	sindresorhus
npm/ini@4.1.1	None	`0`	12.7 kB	npm-cli-ops
npm/inquirer@9.3.5	Transitive: environment	`+26`	669 kB	sboudrias
npm/is-docker@3.0.0	None	`0`	3.15 kB	sindresorhus
npm/is-installed-globally@1.0.0	Transitive: environment	`+1`	12 kB	sindresorhus
npm/is-npm@6.0.0	environment	`0`	5.04 kB	sindresorhus
npm/is-path-cwd@3.0.0	None	`0`	3.16 kB	sindresorhus
npm/is-path-inside@4.0.0	None	`0`	4.2 kB	sindresorhus
npm/is-scoped@3.0.0	None	`0`	2.7 kB	sindresorhus
npm/is-stream@3.0.0	None	`0`	6.23 kB	sindresorhus
npm/is-url-superb@6.1.0	None	`0`	3.25 kB	sindresorhus
npm/is-wsl@3.1.0	environment	`+1`	6.93 kB	sindresorhus
npm/issue-regex@4.1.0	None	`0`	3.51 kB	sindresorhus
npm/keyv@4.5.4	None	`0`	27.8 kB	jaredwray
npm/latest-version@7.0.0	None	`0`	4.13 kB	sindresorhus
npm/log-symbols@6.0.0	Transitive: environment	`+1`	8.13 kB	sindresorhus
npm/lowercase-keys@3.0.0	None	`0`	3.32 kB	sindresorhus
npm/lru-cache@10.4.3	None	`0`	804 kB	isaacs
npm/meow@13.2.0	None	`0`	419 kB	sindresorhus
npm/mimic-fn@4.0.0	None	`0`	8.18 kB	sindresorhus
npm/mimic-response@4.0.0	None	`0`	6.2 kB	sindresorhus
npm/minimatch@9.0.5	environment	`+2`	453 kB	isaacs
npm/new-github-release-url@2.0.0	None	`0`	6.17 kB	sindresorhus
npm/normalize-package-data@6.0.2	None	`0`	28.2 kB	npm-cli-ops
npm/normalize-url@8.0.1	None	`0`	25.9 kB	sindresorhus
npm/np@10.0.6	Transitive: environment, eval	`+81`	7.14 MB	sindresorhus
npm/npm-name@8.0.0	None	`+4`	196 kB	sindresorhus
npm/npm-run-path@5.3.0	environment	`+1`	12.5 kB	sindresorhus
npm/onetime@7.0.0	None	`+1`	13.5 kB	sindresorhus
npm/open@10.1.0	environment	`+6`	80.1 kB	sindresorhus
npm/p-cancelable@3.0.0	None	`0`	13.4 kB	sindresorhus
npm/p-map@5.5.0	None	`0`	16.7 kB	sindresorhus
npm/p-memoize@7.1.1	None	`+1`	290 kB	sindresorhus
npm/p-timeout@6.1.2	None	`0`	12 kB	sindresorhus
npm/package-json@8.1.1	None	`0`	12.9 kB	sindresorhus
npm/pkg-dir@8.0.0	None	`+1`	12.1 kB	sindresorhus
npm/pupa@3.1.0	None	`0`	6.92 kB	sindresorhus
npm/registry-auth-token@5.0.2	environment Transitive: filesystem, network	`+6`	124 kB	rexxars
npm/registry-url@6.0.1	None	`0`	4.29 kB	sindresorhus
npm/responselike@3.0.0	None	`0`	5.55 kB	sindresorhus
npm/rxjs@7.8.1	None	`+1`	4.59 MB	blesh
npm/scoped-regex@3.0.0	None	`0`	3.52 kB	sindresorhus
npm/semver-diff@4.0.0	None	`0`	5.17 kB	sindresorhus
npm/semver@7.6.2	None	`0`	95.4 kB	npm-cli-ops
npm/signal-exit@4.1.0	None	`0`	77 kB	isaacs
npm/slash@4.0.0	None	`0`	3.83 kB	sindresorhus
npm/strip-final-newline@3.0.0	None	`0`	3.36 kB	sindresorhus
npm/symbol-observable@4.0.0	eval	`0`	16.8 kB	blesh
npm/terminal-link@3.0.0	None	`+1`	22.6 kB	sindresorhus
npm/unique-string@3.0.0	None	`0`	2.79 kB	sindresorhus
npm/update-notifier@7.0.0	environment Transitive: filesystem	`+3`	26.5 kB	sindresorhus
npm/validate-npm-package-name@5.0.1	unsafe	`0`	7.77 kB	npm-cli-ops
npm/widest-line@4.0.1	None	`+3`	121 kB	sindresorhus
npm/wrap-ansi@6.2.0	None	`0`	9.5 kB	sindresorhus
npm/xdg-basedir@5.1.0	None	`0`	6.81 kB	sindresorhus

🚮 Removed packages: npm/ini@1.3.7, npm/mimic-response@2.1.0, npm/np@7.6.2, npm/registry-url@5.1.0

View full report↗︎

feat: upgrade np from 7.6.2 to 10.0.6

b284284

Snyk has created this PR to upgrade np from 7.6.2 to 10.0.6. See this package in npm: np See this project in Snyk: https://app.snyk.io/org/chere3/project/a89e8a75-4f80-4ef9-a3ba-727fc1a20520?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade np from 7.6.2 to 10.0.6 #18

[Snyk] Upgrade np from 7.6.2 to 10.0.6 #18

Chere3 commented Jul 10, 2024

Breaking

Improvements

Breaking

Improvements

socket-security bot commented Jul 10, 2024

[Snyk] Upgrade np from 7.6.2 to 10.0.6 #18

Are you sure you want to change the base?

[Snyk] Upgrade np from 7.6.2 to 10.0.6 #18

Conversation

Chere3 commented Jul 10, 2024

Snyk has created this PR to upgrade np from 7.6.2 to 10.0.6.

Issues fixed by the recommended upgrade:

Breaking

Improvements

Breaking

Improvements

socket-security bot commented Jul 10, 2024