Reeve
Reeve copied to clipboard
Web application scaffolding for production environments.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.  As this is a private repository, Snyk-bot does not...
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. As this is a private repository, Snyk-bot does not have access....
Bumps [http-proxy](https://github.com/http-party/node-http-proxy) from 1.17.0 to 1.18.1. Changelog Sourced from http-proxy's changelog. v1.18.1 - 2020-05-17 Merged Skip sending the proxyReq event when the expect header is present [#1447](https://github.com/http-party/node-http-proxy/issues/1447) Remove node6 support,...
Bumps [markdown-to-jsx](https://github.com/probablyup/markdown-to-jsx) from 6.9.3 to 6.11.4. Release notes Sourced from markdown-to-jsx's releases. 6.11.4: Mitigates security vulnerability where maliciously crafted markdown links could use data: or vbscript: urls to trigger an...
Bumps [lodash.merge](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/configuring-github-dependabot-security-updates) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [bcrypt](https://github.com/kelektiv/node.bcrypt.js) from 3.0.6 to 5.0.0. Release notes Sourced from bcrypt's releases. v5.0.0 Fix the bcrypt "wrap-around" bug. It affects passwords with lengths >= 255. It is uncommon but it's...
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. As this is a private repository, Snyk-bot does not have access....
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. As this is a private repository, Snyk-bot does not have access....
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. As this is a private repository, Snyk-bot does not have access....
Bumps [websocket-extensions](https://github.com/faye/websocket-extensions-node) from 0.1.3 to 0.1.4. Changelog Sourced from websocket-extensions's changelog. 0.1.4 / 2020-06-02 Remove a ReDoS vulnerability in the header parser (CVE-2020-7662, reported by Robert McLaughlin) Change license from...