[Snyk] Fix for 3 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • deps/npm/node_modules/spdx-correct/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	No Known Exploit
	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Improper Privilege Management SNYK-JS-SHELLJS-2332187	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: standard

The new version differs by 250 commits.

• fa0c1e4 update authors
• 81de719 16.0.0
• 9f94f98 prep changelog for 16.0.0
• f5b298a standard-engine@14
• 9f73bf2 eslint-config-standard-jsx@10
• 0ce671d eslint-config-standard@16
• dfea036 changelog
• c167c0a disable failing repos for 'no-var' rule
• 24ddf3f changelog
• 258ee48 disable no-var rule for cmd since it needs to run on all node versions
• 59dc70e remove eslint-plugin-standard
• 7c7dbec changelog
• 6fbe538 test: fix logs
• e5e0b37 test: disable failing repos
• a98eba7 test: re-enable disabled repos which now pass!
• 0bfd793 test: disable non-existent repo
• 6f9f2f1 test: add script to detect non-existent repos
• 0d429d0 test: remove non-existant repo
• 0b64eb3 test: add --write option to save changes to "disable" prop
• 8b97b72 test: add test packages into same repo
• e1b0466 changelog
• 692c0fe changelog
• c30a584 remove mkdirp dependency
• d1f9de1 remove broken eslint-index package

See the full diff

Package name: standard-markdown

The new version differs by 27 commits.

• 89a0cfa 7.0.0
• c7fe72f Merge pull request [Snyk] Security upgrade @npmcli/arborist from 2.10.0 to 3.0.0 #40 from abetomo/feature/upgrade_standard_to_16
• e489d64 Update .travis.yml
• 2ad8d4e Upgrade standard to 16
• cef5c5b 6.0.0
• 3328e7d Merge pull request [Snyk] Security upgrade acorn-private-class-elements from 0.1.1 to 0.2.0 #36 from abetomo/upgrade_packages
• 6e3ee69 Drop support Node.js 6
• aa9c801 Upgrade 'standard' from 13.x to 14.x
• 2f044f4 5.1.0
• 957f602 ignore package lock
• 201fa49 Merge pull request [Snyk] Security upgrade acorn-private-class-elements from 0.1.1 to 0.2.0 #34 from abetomo/upgrade_standard
• 6b72431 Drop Node.js 6 from .travis.yml
• 7579a91 Upgrade 'standard'
• 3d752cf Merge pull request [Snyk] Security upgrade jsprim from 1.4.1 to 2.0.2 #32 from abetomo/add_nodejs12_to_ci_setting
• 6e6f133 Add Node.js12 to CI setting
• 93039a1 5.0.1
• b593d05 Merge pull request [Snyk] Security upgrade mocha from 8.2.1 to 8.3.0 #28 from abetomo/fix_to_use_promise_all_instead_of_async
• f3f703c Update readme.md
• 83a6fd3 Update engines.node to ">=6"
• 83168b6 Fix to use Promise.all instead of async package
• a5c3ee9 5.0.0
• 8023aa4 Merge pull request [Snyk] Security upgrade ansi-regex from 5.0.0 to 6.0.1 #27 from abetomo/upgrade_packages
• 95dad5d Modify to follow the rules of the new 'standard'
• d4692c5 Merge pull request [Snyk] Security upgrade strip-ansi from 6.0.0 to 7.0.0 #26 from abetomo/update_ci_test_to_lts_version

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Improper Privilege Management