Skip to content
This repository was archived by the owner on May 24, 2022. It is now read-only.

Commit ff39aad

Browse files
authored
Use kind-of >=6.0.3 everywhere (#590)
* Use kind-of >=6.0.3 everywhere This repo's dependencies currently use [older versions](https://github.com/paritytech/fether/blob/3c0363079e1148ae0dc0595523905f9bee7b9a84/yarn.lock#L10218) of kind-of which have a possibly exploitable vulnerability ([original issue](jonschlinkert/kind-of#30), [PR](jonschlinkert/kind-of#31)). * Update yarn.lock
1 parent 3c03630 commit ff39aad

File tree

2 files changed

+8
-31
lines changed

2 files changed

+8
-31
lines changed

package.json

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -77,5 +77,8 @@
7777
"semver": "^5.6.0",
7878
"ts-node": "^8.0.3",
7979
"typescript": "^3.3.4000"
80+
},
81+
"resolutions": {
82+
"kind-of": ">=6.0.3"
8083
}
8184
}

yarn.lock

Lines changed: 5 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -9126,7 +9126,7 @@ is-binary-path@^1.0.0:
91269126
dependencies:
91279127
binary-extensions "^1.0.0"
91289128

9129-
is-buffer@^1.0.2, is-buffer@^1.1.4, is-buffer@^1.1.5:
9129+
is-buffer@^1.1.4:
91309130
version "1.1.6"
91319131
resolved "https://registry.yarnpkg.com/is-buffer/-/is-buffer-1.1.6.tgz#efaa2ea9daa0d7ab2ea13a97b2b8ad51fefbe8be"
91329132
integrity sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w==
@@ -10215,36 +10215,10 @@ killable@^1.0.1:
1021510215
resolved "https://registry.yarnpkg.com/killable/-/killable-1.0.1.tgz#4c8ce441187a061c7474fb87ca08e2a638194892"
1021610216
integrity sha512-LzqtLKlUwirEUyl/nicirVmNiPvYs7l5n8wOPP7fyJVpUPkvCnW/vuiXGpylGUlnPDnB7311rARzAt3Mhswpjg==
1021710217

10218-
kind-of@^2.0.1:
10219-
version "2.0.1"
10220-
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-2.0.1.tgz#018ec7a4ce7e3a86cb9141be519d24c8faa981b5"
10221-
integrity sha1-AY7HpM5+OobLkUG+UZ0kyPqpgbU=
10222-
dependencies:
10223-
is-buffer "^1.0.2"
10224-
10225-
kind-of@^3.0.2, kind-of@^3.0.3, kind-of@^3.2.0:
10226-
version "3.2.2"
10227-
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-3.2.2.tgz#31ea21a734bab9bbb0f32466d893aea51e4a3c64"
10228-
integrity sha1-MeohpzS6ubuw8yRm2JOupR5KPGQ=
10229-
dependencies:
10230-
is-buffer "^1.1.5"
10231-
10232-
kind-of@^4.0.0:
10233-
version "4.0.0"
10234-
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-4.0.0.tgz#20813df3d712928b207378691a45066fae72dd57"
10235-
integrity sha1-IIE989cSkosgc3hpGkUGb65y3Vc=
10236-
dependencies:
10237-
is-buffer "^1.1.5"
10238-
10239-
kind-of@^5.0.0:
10240-
version "5.1.0"
10241-
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-5.1.0.tgz#729c91e2d857b7a419a1f9aa65685c4c33f5845d"
10242-
integrity sha512-NGEErnH6F2vUuXDh+OlbcKW7/wOcfdRHaZ7VWtqCztfHri/++YKmP51OdWeGPuqCOba6kk2OTe5d02VmTB80Pw==
10243-
10244-
kind-of@^6.0.0, kind-of@^6.0.2:
10245-
version "6.0.2"
10246-
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-6.0.2.tgz#01146b36a6218e64e58f3a8d66de5d7fc6f6d051"
10247-
integrity sha512-s5kLOcnH0XqDO+FvuaLX8DDjZ18CGFk7VygH40QoKPUQhW4e2rvM0rwUq0t8IQDOwYSeLK01U90OjzBTme2QqA==
10218+
kind-of@>=6.0.3, kind-of@^2.0.1, kind-of@^3.0.2, kind-of@^3.0.3, kind-of@^3.2.0, kind-of@^4.0.0, kind-of@^5.0.0, kind-of@^6.0.0, kind-of@^6.0.2:
10219+
version "6.0.3"
10220+
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-6.0.3.tgz#07c05034a6c349fa06e24fa35aa76db4580ce4dd"
10221+
integrity sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw==
1024810222

1024910223
kleur@^3.0.3:
1025010224
version "3.0.3"

0 commit comments

Comments
 (0)