Skip to content

Commit

Permalink
Upgrade xslx (SheetJS) to 0.19.3 to avoid the Prototype Pollution vul…
Browse files Browse the repository at this point in the history
…nerability. See SheetJS/sheetjs#2822.

Also upgrade Mocha to 10.2.0 to avoid other vulnerabilities mentioned by npm audit.
  • Loading branch information
Gwened committed May 10, 2023
1 parent 6dfd5ae commit 24932fd
Showing 1 changed file with 72 additions and 36 deletions.
108 changes: 72 additions & 36 deletions package.json
Original file line number Diff line number Diff line change
@@ -1,40 +1,55 @@
{
"name": "json-key-string-xlsx",
"version": "1.4.1",
"description": "Convert between json and xlsx files by key string in a browser or NodeJS.",
"main": "dist/json-key-string-xlsx.cjs.min.js",
"module": "dist/json-key-string-xlsx.esm.min.js",
"browser": "dist/json-key-string-xlsx.umd.min.js",
"scripts": {
"cnpm": "npm i --registry=https://registry.npm.taobao.org",
"eslint": "eslint .",
"build": "node scripts/build.js",
"changelog": "conventional-changelog -p angular -i CHANGELOG.md -s",
"test": "mocha -t 10000 -s 2000 test/*.test.js",
"test-coverage": "nyc npm run test",
"report-coverage": "nyc report --reporter=text-lcov > coverage.lcov && codecov"
"_from": "json-key-string-xlsx@^1.4.1",
"_id": "[email protected]",
"_inBundle": false,
"_integrity": "sha512-NXSiMsDQPj7WDPSwjmdX7IAdO/NDAJ94rfjE2oEIDR3Vj3EVlXxt9GE/fAZbY831zsJbiQbUaXvaDzJ+1Kd/GA==",
"_location": "/json-key-string-xlsx",
"_phantomChildren": {
"adler-32": "1.2.0",
"cfb": "1.2.2",
"codepage": "1.15.0",
"crc-32": "1.2.2",
"ssf": "0.11.2",
"wmf": "1.0.2",
"word": "0.3.0"
},
"keywords": [
"excel",
"json",
"key",
"xlsx",
"json-key-string",
"i18n",
"language",
"多语言",
"国际化"
"_requested": {
"type": "range",
"registry": true,
"raw": "json-key-string-xlsx@^1.4.1",
"name": "json-key-string-xlsx",
"escapedName": "json-key-string-xlsx",
"rawSpec": "^1.4.1",
"saveSpec": null,
"fetchSpec": "^1.4.1"
},
"_requiredBy": [
"/"
],
"author": "jobyrao<[email protected]>",
"homepage": "https://github.com/jobyrao/json-key-string-xlsx#readme",
"_resolved": "https://registry.npmjs.org/json-key-string-xlsx/-/json-key-string-xlsx-1.4.1.tgz",
"_shasum": "6b53c423ad1bdd907d7c4460a621f0089212dd04",
"_spec": "json-key-string-xlsx@^1.4.1",
"_where": "/Users/oliviercado/Code/Corrin/corrinapp/corrinapp1",
"author": {
"name": "jobyrao",
"email": "[email protected]"
},
"browser": "dist/json-key-string-xlsx.umd.min.js",
"bugs": {
"url": "https://github.com/jobyrao/json-key-string-xlsx/issues",
"email": "[email protected]"
},
"license": "MIT",
"bundleDependencies": false,
"commitlint": {
"extends": [
"@commitlint/config-conventional"
]
},
"dependencies": {
"xlsx": "~0.17.4"
"xlsx": "https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz"
},
"deprecated": false,
"description": "Convert between json and xlsx files by key string in a browser or NodeJS.",
"devDependencies": {
"@babel/core": "^7.9.6",
"@babel/preset-env": "^7.7.6",
Expand All @@ -47,7 +62,7 @@
"eslint": "^4.11.0",
"eslint-config-egg": "^7.4.1",
"husky": "^4.3.0",
"mocha": "^6.2.0",
"mocha": "^10.2.0",
"nyc": "^14.1.1",
"rollup": "^1.27.13",
"rollup-plugin-babel": "^4.4.0",
Expand All @@ -63,19 +78,40 @@
"dist",
"types"
],
"types": "./types/index.d.ts",
"commitlint": {
"extends": [
"@commitlint/config-conventional"
]
},
"homepage": "https://github.com/jobyrao/json-key-string-xlsx#readme",
"husky": {
"hooks": {
"commit-msg": "commitlint -E HUSKY_GIT_PARAMS"
}
},
"keywords": [
"excel",
"json",
"key",
"xlsx",
"json-key-string",
"i18n",
"language",
"多语言",
"国际化"
],
"license": "MIT",
"main": "dist/json-key-string-xlsx.cjs.min.js",
"module": "dist/json-key-string-xlsx.esm.min.js",
"name": "json-key-string-xlsx",
"repository": {
"type": "git",
"url": "git+https://github.com/jobyrao/json-key-string-xlsx.git"
}
},
"scripts": {
"build": "node scripts/build.js",
"changelog": "conventional-changelog -p angular -i CHANGELOG.md -s",
"cnpm": "npm i --registry=https://registry.npm.taobao.org",
"eslint": "eslint .",
"report-coverage": "nyc report --reporter=text-lcov > coverage.lcov && codecov",
"test": "mocha -t 10000 -s 2000 test/*.test.js",
"test-coverage": "nyc npm run test"
},
"types": "./types/index.d.ts",
"version": "1.4.1"
}

0 comments on commit 24932fd

Please sign in to comment.