fullstack-shopping-cart
fullstack-shopping-cart copied to clipboard
MERN stack shopping cart, written in TypeScript
Bumps [terser](https://github.com/terser/terser) from 3.14.1 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) v4.8.0 Support for numeric separators (million...
Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...
Bumps [tar](https://github.com/npm/node-tar) from 4.4.13 to 4.4.19. Commits 9a6faa0 4.4.19 70ef812 drop dirCache for symlink on all platforms 3e35515 4.4.18 52b09e3 fix: prevent path escape using drive-relative paths bb93ba2 fix: reserve...
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...
Bumps [lodash.merge](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/configuring-github-dependabot-security-updates) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [http-proxy](https://github.com/http-party/node-http-proxy) from 1.17.0 to 1.18.1. Changelog Sourced from http-proxy's changelog. v1.18.1 - 2020-05-17 Merged Skip sending the proxyReq event when the expect header is present [#1447](https://github.com/http-party/node-http-proxy/issues/1447) Remove node6 support,...
Bumps [axios](https://github.com/axios/axios) from 0.17.1 to 0.18.1. Release notes Sourced from axios's releases. v0.18.1 Security Fix: Destroy stream on exceeding maxContentLength (fixes #1098) (#1485) - Gadzhi Gadzhiev v.0.18.0 Adding support for...
Bumps [decompress](https://github.com/kevva/decompress) from 4.2.0 to 4.2.1. Release notes Sourced from decompress's releases. v4.2.1 Prevent directory traversal (#73) 967146e https://github.com/kevva/decompress/compare/v4.2.0...v4.2.1 Commits 84a8c10 4.2.1 fafff47 Meta tweaks 967146e Prevent directory traversal (#73)...
Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7. Commits c74c8af 1.3.7 024b8b5 update deps, add linting 032fbaf Use Object.create(null) to avoid default object property hazards 2da9039 1.3.6 cfea636 better git push script,...
Bumps [elliptic](https://github.com/indutny/elliptic) from 6.4.1 to 6.5.3. Commits 8647803 6.5.3 856fe4d signature: prevent malleability and overflows 6048941 6.5.2 9984964 package: bump dependencies ec735ed utils: leak less information in getNAF() 71e4e8e 6.5.1...