node-coveralls

node-coveralls copied to clipboard

Update Semaphore Config

1

Per the semaphore [docs](https://docs.semaphoreci.com/ci-cd-environment/environment-variables/).

jaredmoody

Bumps [glob-parent](https://github.com/gulpjs/glob-parent) from 6.0.0 to 6.0.1. Release notes Sourced from glob-parent's releases. glob-parent v6.0.1 Bug Fixes Resolve ReDoS vulnerability from CVE-2021-35065 (#49) (3e9f04a) Changelog Sourced from glob-parent's changelog. 6.0.1 (2021-07-20)...

dependabot[bot]

Is this repo not maintained anymore?

1

There are several outdated dependencies. The last update was very long time ago and issues are ignored.

vikingair

Security issue `json-schema`

4

Hello @nickmerwin and node-coveralls team Thank you a lot for maintaining this great package. I got notification which `json-schema` is vulnerable and when running `yarn why json-schema` i found these...

dalisoft

update minimist to >=1.2.6 due to critical vulnerability

1

there is a vulnerability for minimist dependency https://github.com/advisories/GHSA-xvch-5gv4-984h also consider updating other dependencies please :)

Yuriy1988

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Moderate severity issue with current sshpk version

2

See here: ``` CVE-2018-3737 (moderate severity) Vulnerable versions: < 1.13.2 Patched version: 1.13.2 The sshpk NPM package is vulnerable to ReDoS when parsing crafted invalid public keys. ``` Please update...

vikingair

Correct the count of lines.

5

The number of lines in a file is usually computed at the number of newlines in the file minus 1, as described [here](https://codereview.stackexchange.com/questions/131143/counting-newlines-in-a-file). I also confirmed this by running `wc`...

eyal0

CircleCI build displays the workflow id in coveralls rather than the build num

2

Trying to integrate with Coveralls using CircleCI, I am using the [Coveralls Orb](https://circleci.com/developer/orbs/orb/coveralls/coveralls?utm_source=google&utm_medium=sem&utm_campaign=sem-google-dg--emea-en-dsa-maxConv-auth-brand&utm_term=g_b-_c__dsa_&utm_content=&gclid=CjwKCAiAp8iMBhAqEiwAJb94z0LbXQhUlK-JPLK92liKWZClAJEkNp_3HMdC3oni18XNLQ327bdJgRoCzJsQAvD_BwE) which uses this under the hood.  I have noticed the build...

ddold