From b46948e3eea6d5a9662de07b4eb4d66ccfb1c895 Mon Sep 17 00:00:00 2001 From: Jozef Hartinger Date: Thu, 19 Apr 2018 16:15:32 +0200 Subject: [PATCH] add explicit moment dependency to workaround https://nodesecurity.io/advisories/532 --- .nsprc | 1 - package-lock.json | 9 ++++----- package.json | 1 + 3 files changed, 5 insertions(+), 6 deletions(-) diff --git a/.nsprc b/.nsprc index 4a567a1..20b15ee 100644 --- a/.nsprc +++ b/.nsprc @@ -1,6 +1,5 @@ { "exceptions": [ - "https://nodesecurity.io/advisories/532", "https://nodesecurity.io/advisories/566" ] } diff --git a/package-lock.json b/package-lock.json index f8a628c..296d476 100644 --- a/package-lock.json +++ b/package-lock.json @@ -309,7 +309,7 @@ "integrity": "sha1-8VDw9nSKvdcq6uhPBEA74u8RN5c=", "requires": { "dtrace-provider": "0.8.5", - "moment": "2.18.1", + "moment": "2.22.1", "mv": "2.1.1", "safe-json-stringify": "1.0.4" } @@ -1531,10 +1531,9 @@ } }, "moment": { - "version": "2.18.1", - "resolved": "https://registry.npmjs.org/moment/-/moment-2.18.1.tgz", - "integrity": "sha1-w2GT3Tzhwu7SrbfIAtu8d6gbHA8=", - "optional": true + "version": "2.22.1", + "resolved": "https://registry.npmjs.org/moment/-/moment-2.22.1.tgz", + "integrity": "sha512-shJkRTSebXvsVqk56I+lkb2latjBs8I+pc2TzWc545y2iFnSjm7Wg0QMh+ZWcdSLQyGEau5jI8ocnmkyTgr9YQ==" }, "ms": { "version": "2.0.0", diff --git a/package.json b/package.json index c846917..3bc8dd2 100644 --- a/package.json +++ b/package.json @@ -32,6 +32,7 @@ "bunyan": "1.8.12", "express": "4.16.3", "lodash": "4.17.5", + "moment": "^2.22.1", "sinon": "^4.4.9" }, "devDependencies": {