enum-fp

enum-fp copied to clipboard

Added common function types like maybe , either

1

Heet-09

Bumps [json5](https://github.com/json5/json5) from 2.1.0 to 2.2.3. Release notes Sourced from json5's releases. v2.2.3 Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299) v2.2.2 Fix: Properties...

dependabot[bot]

Bumps [qs](https://github.com/ljharb/qs) from 6.5.2 to 6.5.3. Changelog Sourced from qs's changelog. 6.5.3 [Fix] parse: ignore __proto__ keys (#428) [Fix] utils.merge: avoid a crash with a null target and a truthy...

dependabot[bot]

Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. Release notes Sourced from decode-uri-component's releases. v0.2.2 Prevent overwriting previously decoded tokens 980e0bf https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2 v0.2.1 Switch to GitHub workflows 76abc93 Fix issue where decode...

dependabot[bot]

Bumps [codecov](https://github.com/codecov/codecov-node) from 3.6.1 to 3.8.3. Release notes Sourced from codecov's releases. v3.8.3 Fixes #329 fix: Test if response has two lines Dependencies #306 Bump eslint-config-prettier from 7.2.0 to 8.3.0...

dependabot[bot]

同学，您这个项目引入了470个开源组件，存在20个漏洞，辛苦升级一下

1

检测到 phenax/enum-fp 一共引入了470个开源组件，存在20个漏洞 ``` 漏洞标题：codecov-node 操作系统命令注入漏洞 缺陷组件：[email protected] 漏洞编号：CVE-2020-15123 漏洞描述：codecov-node是一款测试覆盖率检测软件包。 codecov-node(npm) 3.7.1之前版本中存在操作系统命令注入漏洞。攻击者可借助特制请求利用该漏洞在系统上执行任意命令。 影响范围：(∞, 3.7.1) 最小修复版本：3.7.1 缺陷组件引入路径：[email protected]>[email protected] ``` 另外还有20个漏洞，详细报告：https://mofeisec.com/jr?p=i86ac3

dependasec[bot]

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.0 to 2.6.7. Release notes Sourced from node-fetch's releases. v2.6.7 Security patch release Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th...

dependabot[bot]

Bumps [tmpl](https://github.com/daaku/nodejs-tmpl) from 1.0.4 to 1.0.5. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [tar](https://github.com/npm/node-tar) from 4.4.6 to 4.4.19. Commits 9a6faa0 4.4.19 70ef812 drop dirCache for symlink on all platforms 3e35515 4.4.18 52b09e3 fix: prevent path escape using drive-relative paths bb93ba2 fix: reserve...

dependabot[bot]

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]