chimee-player icon indicating copy to clipboard operation
chimee-player copied to clipboard

[Snyk] Fix for 1 vulnerabilities

Open snyk-bot opened this issue 5 years ago • 1 comments

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

    • package.json
  • Adding or updating a Snyk policy (.snyk) file; this file is required in order to apply Snyk vulnerability patches. Find out more.

Vulnerabilities that will be fixed

With a Snyk patch:
Severity Issue Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-LODASH-567746
Proof of Concept

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

snyk-bot avatar May 05 '20 05:05 snyk-bot

Travis tests have failed

Hey @snyk-bot, Please read the following log in order to understand the failure reason. It'll be awesome if you fix what's wrong and commit the changes.

Node.js: 9

View build log

npm test
> [email protected] test /home/travis/build/Chimeejs/chimee-player
> jest --coverage

 FAIL  __tests__/src/index.js
  ● Test suite failed to run

    Cannot use the decorators and decorators-legacy plugin together

      at validatePlugins (node_modules/@babel/parser/src/plugin-utils.js:47:13)
      at getParser (node_modules/@babel/parser/src/index.js:75:5)
      at parse (node_modules/@babel/parser/src/index.js:58:12)
      at parser (node_modules/@babel/core/lib/parser/index.js:54:34)
          at parser.next (<anonymous>)
      at normalizeFile (node_modules/@babel/core/lib/transformation/normalize-file.js:93:38)
          at normalizeFile.next (<anonymous>)
      at run (node_modules/@babel/core/lib/transformation/index.js:31:50)
          at run.next (<anonymous>)
      at Function.transform (node_modules/@babel/core/lib/transform.js:27:41)

----------|----------|----------|----------|----------|-------------------|
File      |  % Stmts | % Branch |  % Funcs |  % Lines | Uncovered Line #s |
----------|----------|----------|----------|----------|-------------------|
All files |  Unknown |  Unknown |  Unknown |  Unknown |                   |
----------|----------|----------|----------|----------|-------------------|
Handlebars: Access has been denied to resolve the property "statements" because it is not an "own property" of its parent.
You can add a runtime option to disable the check or this warning:
See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details
Handlebars: Access has been denied to resolve the property "branches" because it is not an "own property" of its parent.
You can add a runtime option to disable the check or this warning:
See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details
Handlebars: Access has been denied to resolve the property "functions" because it is not an "own property" of its parent.
You can add a runtime option to disable the check or this warning:
See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details
Handlebars: Access has been denied to resolve the property "lines" because it is not an "own property" of its parent.
You can add a runtime option to disable the check or this warning:
See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details
Test Suites: 1 failed, 1 total
Tests:       0 total
Snapshots:   0 total
Time:        1.512s
Ran all test suites.
npm ERR! Test failed.  See above for more details.
TravisBuddy Request Identifier: 8212e890-8e95-11ea-80eb-6b769f7cd14d

TravisBuddy avatar May 05 '20 05:05 TravisBuddy