hrsakai opened a new pull request #198:
URL: https://github.com/apache/pulsar-client-node/pull/198


   I ran `npm audit fix` to fix security vulnerabilities.
   ```
   $  npm audit
   
                          === npm audit security report ===
   
   # Run  npm update node-fetch --depth 2  to resolve 1 vulnerability
   
┌───────────────┬──────────────────────────────────────────────────────────────┐
   │ High          │ node-fetch is vulnerable to Exposure of Sensitive          
  │
   │               │ Information to an Unauthorized Actor                       
  │
   
├───────────────┼──────────────────────────────────────────────────────────────┤
   │ Package       │ node-fetch                                                 
  │
   
├───────────────┼──────────────────────────────────────────────────────────────┤
   │ Dependency of │ @mapbox/node-pre-gyp                                       
  │
   
├───────────────┼──────────────────────────────────────────────────────────────┤
   │ Path          │ @mapbox/node-pre-gyp > node-fetch                          
  │
   
├───────────────┼──────────────────────────────────────────────────────────────┤
   │ More info     │ https://github.com/advisories/GHSA-r683-j2x4-v87g          
  │
   
└───────────────┴──────────────────────────────────────────────────────────────┘
   
   
   found 1 high severity vulnerability in 786 scanned packages
     run `npm audit fix` to fix 1 of them.
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to