[Snyk] Fix for 15 vulnerabilities

[GerHobbelt]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-GETOBJECT-1054932	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	No	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	No	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-450202	No	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	No	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-73638	No	Proof of Concept
	541/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	No	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASHTEMPLATE-1088054	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-SETVALUE-1540541	No	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-SETVALUE-450213	No	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	No	No Known Exploit
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:braces:20180219	Yes	Proof of Concept
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:lodash:20180130	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: composer

The new version differs by 86 commits.

• 7de80d3 0.11.0
• 0b75a4d unused utils
• 7b5c81e generating docs with verb
• 8986968 updating package metadata
• 4e3ac3e generating docs with verb
• 94e6550 message about watch removal
• 8d498fe deps
• 3a825af removing .watch method
• f41e291 generate docs with verb
• ad6c2fb 0.10.0
• 3ac1fbb dev deps
• 9873ff5 remove session code
• fa4f20e remove session tests
• 8658b1a 0.9.0
• 055c497 generate docs with verb
• 2cd3381 default `build` tasks to `default` when no tasks are specified
• a12d79b add test for no name passed to `build`
• 6d60950 0.8.4
• 1e199a0 deps
• ced35f2 ensuring deps are unique
• 6c8b49b 0.8.3
• 23ed74e resolves https://github.com/jonschlinkert/composer/issues/16
• 13b3cc7 update deps
• d43ed92 use eslint

See the full diff

Package name: cwd

The new version differs by 6 commits.

• 5eea274 use find-pkg
• 6c933b7 adds travis badge
• 1ec00db lint
• 1f157d2 0.8.4
• 88f3026 adds tests
• 1dee9ab only concat args if more than one

See the full diff

Package name: helper-reflinks

The new version differs by 15 commits.

• 60e6bd3 2.1.0
• 616dd52 lint, optimizations, update deps
• f03ea07 lint
• 0789d50 2.0.1
• bd363df metadata
• e314941 lint
• 029b975 2.0
• f66f982 2.0 tests
• 7d5bad0 2.0 docs
• 1da1466 now returns a function that must be called
• 9b2a0e6 1.4.2
• 9afbac3 rebuild docs
• da841c0 lint tests
• 4a715e0 use lazy-cache
• acc338c lint

See the full diff

Package name: helper-related

The new version differs by 8 commits.

• 84cf1e2 lint
• 403bc10 lint
• 5718bb9 0.11.1
• b9b2969 0.11.0
• 7100655 update deps
• c48b2a3 rebuild readme
• ba6f647 optimizations, lazy-caching
• cbc0dc2 lint

See the full diff

Package name: log-symbols

The new version differs by 6 commits.

• ff541ba 2.0.0
• 8f9fd44 Support CI ([Snyk] Fix for 1 vulnerabilities #9)
• eee41c1 Add browser support ([Snyk] Fix for 1 vulnerabilities #8)
• 9cb62d2 Require Node.js 4
• 2c12944 Support Windows 10 ([Snyk] Fix for 1 vulnerabilities #5)
• 6ef88a5 Reference related sindresorhus/figures project ([Snyk] Fix for 1 vulnerable dependencies #3)

See the full diff

Package name: micromatch

The new version differs by 75 commits.

• e91c2f6 Merge pull request 0.9.0 verbose/verb#76 from micromatch/dev
• 914059f run verb to generate readme
• c3bc209 add more unit tests
• 0f65651 lint
• 8d217f5 update benchmarks
• c013ef9 fix grammar
• ad97d84 Merge branch 'master' into dev
• cfeaa29 docs
• bf2cc5a fix url
• 0b679dc Merge pull request 0.9.0: developer docs verbose/verb#88 from DianeLooney/master
• afd2312 Fixed the build badge
• d44afb5 adds examples
• c2e1e0b minor edits
• f2503bb move `compose` to main file
• e894de1 remove dead code, minor re-org
• 75c0628 adds support for `options.noext`
• e816e59 update sourcemap example
• 226797c add tests for matchBase
• ca984a8 windows paths
• 4e28b50 fix windows tests
• c60c378 update bash tests
• c0f4b6f don't remove duplicate slashes
• 41eb8a2 improve logic for unix vs windows path handling
• edf074a wording

See the full diff

Package name: template

The new version differs by 225 commits.

• dcd3b76 0.17.0
• b9b50a7 generate docs
• f89a8ac cleanup, adds some docs
• 03054a1 lazy caching
• a2c5816 use getters
• 3382820 lazy
• 9e470bd more linting
• 0a6d820 only add an object to the collection if it is not an Array
• e91eb7e adding write to view
• b9a2874 reverting File inheriting
• ba286a3 View should inherit from File
• 6a6df19 lint, remove unused deps and files
• 605a641 remove blog example, moving to a repo
• 84e250c lint, start cleaning up
• 7450f43 removed unused code
• 65f6b02 rename
• 069b1cf move extend methods
• 8b4cd1e collection-visit
• b9e5512 move docs in
• f315aaa glob support for helpers
• 65fb958 adds loader docs, organizes docs templates into `docs/src` dir
• 0358f14 remove `inspect` methods on view.
• 0e1fb49 fix cwd errors
• 72d0ae3 lazy caching, cwd and renameKey fixes

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution