lack
lack copied to clipboard
avwo
Whistle 插件脚手架（Whistle Plugin Scaffolding）
? Plugin Name: whistle.gar ? Select template: TypeScript ? Do you need uiServer? No ? Do you need auth function? No ? Do you need sniCallback function? No ? Select...
Bumps [minimist](https://github.com/minimistjs/minimist) from 1.2.5 to 1.2.8. Changelog Sourced from minimist's changelog. v1.2.8 - 2023-02-09 Merged [Fix] Fix long option followed by single dash [#17](https://github.com/minimistjs/minimist/issues/17) [Tests] Remove duplicate test [#12](https://github.com/minimistjs/minimist/issues/12) [Fix]...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2. Release notes Sourced from json5's releases. v1.0.2 Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a...
Bumps [json5](https://github.com/json5/json5) and [tsconfig-paths](https://github.com/dividab/tsconfig-paths). These dependencies needed to be updated together. Updates `json5` from 1.0.1 to 2.2.3 Release notes Sourced from json5's releases. v2.2.3 Fix: [email protected] is now the 'latest'...
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.1.2. Commits 699c459 3.1.2 2f2b5ff fix: trim pattern 25d7c0d 3.1.1 55dda29 fix: treat nocase:true as always having magic 5e1fb8d 3.1.0 f8145c5 Add 'allowWindowsEscape' option 570e8b1...
Bumps [ansi-regex](https://github.com/chalk/ansi-regex) from 3.0.0 to 3.0.1. Commits f545bdb 3.0.1 c57d4c2 fix a few old XO issues for backport 419250f Fix potential ReDoS (#37) See full diff in compare view [![Dependabot...
检测到 avwo/lack 一共引入了218个开源组件，存在2个漏洞 ``` 漏洞标题：npm path-parse 安全漏洞 缺陷组件：[email protected] 漏洞编号：CVE-2021-23343 漏洞描述：npm path-parse是美国npm公司的一个应用插件。提供一个路径解析功能。 path-parse 存在安全漏洞，该漏洞源于受到通过splitDeviceRe、splitTailRe和splitPathRe正则表达式的正则表达式拒绝服务(ReDoS)的攻击。 影响范围：(∞, 1.0.7) 最小修复版本：1.0.7 缺陷组件引入路径：[email protected]>[email protected]>[email protected]>[email protected]>[email protected] [email protected]>[email protected]>[email protected]>[email protected] [email protected]>[email protected]>[email protected]>[email protected]>[email protected]>[email protected] [email protected]>[email protected]>[email protected]>[email protected]>[email protected] ``` 另外还有2个漏洞，详细报告：https://mofeisec.com/jr?p=a096ca
Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9. Changelog Sourced from hosted-git-info's changelog. 2.8.9 (2021-04-07) Bug Fixes backport regex fix from #76 (29adfe5), closes #84 Commits 8d4b369 chore(release): 2.8.9 29adfe5 fix: backport...
