From 0165b9dd8bd277d5f88778b41b349e64fe1beb8f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 8 Jul 2022 07:22:09 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-MOMENT-2944238 --- package-lock.json | 138 ++++++++++++---------------------------------- package.json | 4 +- 2 files changed, 38 insertions(+), 104 deletions(-) diff --git a/package-lock.json b/package-lock.json index 660c487a6f..543a936aa8 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1204,23 +1204,6 @@ "babel-types": "6.26.0" } }, - "babel-polyfill": { - "version": "6.23.0", - "resolved": "https://registry.npmjs.org/babel-polyfill/-/babel-polyfill-6.23.0.tgz", - "integrity": "sha1-g2TKYt+Or7gwSZ9pkXdGbDsDSZ0=", - "requires": { - "babel-runtime": "6.26.0", - "core-js": "2.5.5", - "regenerator-runtime": "0.10.5" - }, - "dependencies": { - "regenerator-runtime": { - "version": "0.10.5", - "resolved": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.10.5.tgz", - "integrity": "sha1-M2w+/BIgrc7dosn6tntaeVWjNlg=" - } - } - }, "babel-preset-env": { "version": "1.6.1", "resolved": "https://registry.npmjs.org/babel-preset-env/-/babel-preset-env-1.6.1.tgz", @@ -1909,16 +1892,9 @@ "integrity": "sha1-G2gcIf+EAzyCZUMJBolCDRhxUdw=" }, "ccxt": { - "version": "1.13.32", - "resolved": "https://registry.npmjs.org/ccxt/-/ccxt-1.13.32.tgz", - "integrity": "sha512-QPZ5XNFRBaoT07Z4pARubtETKlXU67KYdb0oLfyAJiJkfuKLafVbuUgtDIUWioerWfNP83lX5hK/YcevZO0TVg==", - "requires": { - "cloudscraper": "1.4.1", - "crypto-js": "3.1.9-1", - "fetch-ponyfill": "4.1.0", - "opencollective": "1.0.3", - "qs": "6.5.1" - } + "version": "1.40.1", + "resolved": "https://registry.npmjs.org/ccxt/-/ccxt-1.40.1.tgz", + "integrity": "sha512-8rpZkCBp0+5HjcjJUOQLK/6TKrctx3Bff2tOVBiJ/23mz5EhSC7v3c4ccuqc/FD30i6CCs0/i5u8yDnhHJEwWw==" }, "cexio-api-node": { "version": "1.2.0", @@ -1940,6 +1916,11 @@ "ms": "2.0.0" } }, + "moment": { + "version": "2.22.1", + "resolved": "https://registry.npmjs.org/moment/-/moment-2.22.1.tgz", + "integrity": "sha512-shJkRTSebXvsVqk56I+lkb2latjBs8I+pc2TzWc545y2iFnSjm7Wg0QMh+ZWcdSLQyGEau5jI8ocnmkyTgr9YQ==" + }, "underscore": { "version": "1.9.0", "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.9.0.tgz", @@ -2669,11 +2650,6 @@ "randomfill": "1.0.4" } }, - "crypto-js": { - "version": "3.1.9-1", - "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-3.1.9-1.tgz", - "integrity": "sha1-/aGedh/Ad+Af+/3G6f38WeiAbNg=" - }, "css": { "version": "2.2.1", "resolved": "https://registry.npmjs.org/css/-/css-2.2.1.tgz", @@ -3210,14 +3186,6 @@ "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz", "integrity": "sha1-rT/0yG7C0CkyL1oCw6mmBslbP1k=" }, - "encoding": { - "version": "0.1.12", - "resolved": "https://registry.npmjs.org/encoding/-/encoding-0.1.12.tgz", - "integrity": "sha1-U4tm8+5izRq1HsMjgp0flIDHS+s=", - "requires": { - "iconv-lite": "0.4.21" - } - }, "end-of-stream": { "version": "1.4.1", "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.1.tgz", @@ -3754,14 +3722,6 @@ "websocket-driver": "0.7.0" } }, - "fetch-ponyfill": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/fetch-ponyfill/-/fetch-ponyfill-4.1.0.tgz", - "integrity": "sha1-rjzl9zLGReq4fkroeTQUcJsjmJM=", - "requires": { - "node-fetch": "1.7.3" - } - }, "figures": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/figures/-/figures-2.0.0.tgz", @@ -3935,6 +3895,7 @@ }, "forex.analytics": { "version": "github:mkmarek/forex.analytics#7bc278987700d4204e959af17de61495941d1a14", + "from": "forex.analytics@github:mkmarek/forex.analytics#7bc278987700d4204e959af17de61495941d1a14", "requires": { "nan": "2.10.0" } @@ -4035,7 +3996,8 @@ }, "ansi-regex": { "version": "2.1.1", - "bundled": true + "bundled": true, + "optional": true }, "aproba": { "version": "1.1.1", @@ -4119,7 +4081,8 @@ }, "code-point-at": { "version": "1.1.0", - "bundled": true + "bundled": true, + "optional": true }, "combined-stream": { "version": "1.0.5", @@ -4134,7 +4097,8 @@ }, "console-control-strings": { "version": "1.1.0", - "bundled": true + "bundled": true, + "optional": true }, "core-util-is": { "version": "1.0.2", @@ -4342,6 +4306,7 @@ "is-fullwidth-code-point": { "version": "1.0.0", "bundled": true, + "optional": true, "requires": { "number-is-nan": "1.0.1" } @@ -4502,7 +4467,8 @@ }, "number-is-nan": { "version": "1.0.1", - "bundled": true + "bundled": true, + "optional": true }, "oauth-sign": { "version": "0.8.2", @@ -4675,6 +4641,7 @@ "string-width": { "version": "1.0.2", "bundled": true, + "optional": true, "requires": { "code-point-at": "1.1.0", "is-fullwidth-code-point": "1.0.0", @@ -4695,6 +4662,7 @@ "strip-ansi": { "version": "3.0.1", "bundled": true, + "optional": true, "requires": { "ansi-regex": "2.1.1" } @@ -5612,6 +5580,7 @@ "version": "3.0.6", "resolved": "https://registry.npmjs.org/inquirer/-/inquirer-3.0.6.tgz", "integrity": "sha1-4EqqnQW3o8ubD0B9BDdfBEcZA0c=", + "dev": true, "requires": { "ansi-escapes": "1.4.0", "chalk": "1.1.3", @@ -8001,9 +7970,9 @@ } }, "moment": { - "version": "2.22.1", - "resolved": "https://registry.npmjs.org/moment/-/moment-2.22.1.tgz", - "integrity": "sha512-shJkRTSebXvsVqk56I+lkb2latjBs8I+pc2TzWc545y2iFnSjm7Wg0QMh+ZWcdSLQyGEau5jI8ocnmkyTgr9YQ==" + "version": "2.29.4", + "resolved": "https://registry.npmjs.org/moment/-/moment-2.29.4.tgz", + "integrity": "sha512-5LC9SOxjSc2HF6vO2CyuTDNivEdoz2IvyJJGj6X8DJ0eFyfszE0QiEd+iXmBvUP3WHxSjFH/vIsA0EN00cgr8w==" }, "mongodb": { "version": "3.0.7", @@ -8149,15 +8118,6 @@ "resolved": "https://registry.npmjs.org/node-dir/-/node-dir-0.1.8.tgz", "integrity": "sha1-VfuN62mQcHB/tn+RpGDwRIKUx30=" }, - "node-fetch": { - "version": "1.7.3", - "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-1.7.3.tgz", - "integrity": "sha512-NhZ4CsKx7cYm2vSrBAr2PvFOe6sWDf0UYLRqA6svUYg7+/TSfVAu49jYC4BvQ4Sms9SZgdqGBgroqfDhJdTyKQ==", - "requires": { - "encoding": "0.1.12", - "is-stream": "1.1.0" - } - }, "node-forge": { "version": "0.7.5", "resolved": "https://registry.npmjs.org/node-forge/-/node-forge-0.7.5.tgz", @@ -8672,9 +8632,6 @@ "resolved": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz", "integrity": "sha1-CXtgK1NCKlIsGvuHkDGDNpQaAR0=" }, - "numbro": { - "version": "github:highvelocityspace/numbro#65a801c05c40496e5701458c0d4e780060e9a742" - }, "nwmatcher": { "version": "1.4.4", "resolved": "https://registry.npmjs.org/nwmatcher/-/nwmatcher-1.4.4.tgz", @@ -8814,39 +8771,6 @@ "mimic-fn": "1.2.0" } }, - "opencollective": { - "version": "1.0.3", - "resolved": "https://registry.npmjs.org/opencollective/-/opencollective-1.0.3.tgz", - "integrity": "sha1-ruY3K8KBRFg2kMPKja7PwSDdDvE=", - "requires": { - "babel-polyfill": "6.23.0", - "chalk": "1.1.3", - "inquirer": "3.0.6", - "minimist": "1.2.0", - "node-fetch": "1.6.3", - "opn": "4.0.2" - }, - "dependencies": { - "node-fetch": { - "version": "1.6.3", - "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-1.6.3.tgz", - "integrity": "sha1-3CNO3WSJmC1Y6PDbT2lQKavNjAQ=", - "requires": { - "encoding": "0.1.12", - "is-stream": "1.1.0" - } - } - } - }, - "opn": { - "version": "4.0.2", - "resolved": "https://registry.npmjs.org/opn/-/opn-4.0.2.tgz", - "integrity": "sha1-erwi5kTf9jsKltWrfyeQwPAavJU=", - "requires": { - "object-assign": "4.1.1", - "pinkie-promise": "2.0.1" - } - }, "optionator": { "version": "0.8.2", "resolved": "https://registry.npmjs.org/optionator/-/optionator-0.8.2.tgz", @@ -9261,6 +9185,7 @@ "version": "0.4.2", "resolved": "https://registry.npmjs.org/boom/-/boom-0.4.2.tgz", "integrity": "sha1-emNune1O/O+xnO9JR6PGffrukRs=", + "optional": true, "requires": { "hoek": "0.9.1" } @@ -9320,7 +9245,8 @@ "hoek": { "version": "0.9.1", "resolved": "https://registry.npmjs.org/hoek/-/hoek-0.9.1.tgz", - "integrity": "sha1-PTIkYrrfB3Fup+uFuviAec3c5QU=" + "integrity": "sha1-PTIkYrrfB3Fup+uFuviAec3c5QU=", + "optional": true }, "http-signature": { "version": "0.10.1", @@ -10990,7 +10916,8 @@ "rx": { "version": "4.1.0", "resolved": "https://registry.npmjs.org/rx/-/rx-4.1.0.tgz", - "integrity": "sha1-pfE/957zt0D+MKqAP7CfmIBdR4I=" + "integrity": "sha1-pfE/957zt0D+MKqAP7CfmIBdR4I=", + "dev": true }, "rx-lite": { "version": "4.0.8", @@ -11979,6 +11906,13 @@ "integrity": "sha1-2H9xqMhrjqq95zX3qcSzJc6ZhXw=", "requires": { "moment": "2.22.1" + }, + "dependencies": { + "moment": { + "version": "2.22.1", + "resolved": "https://registry.npmjs.org/moment/-/moment-2.22.1.tgz", + "integrity": "sha512-shJkRTSebXvsVqk56I+lkb2latjBs8I+pc2TzWc545y2iFnSjm7Wg0QMh+ZWcdSLQyGEau5jI8ocnmkyTgr9YQ==" + } } }, "timed-out": { diff --git a/package.json b/package.json index ddeb80fcf6..a75dbd8963 100644 --- a/package.json +++ b/package.json @@ -37,7 +37,7 @@ "bl": "^1.2.2", "bollinger-bands": "^3.0.1", "bootstrap": "^4.0.0-beta.2", - "ccxt": "^1.12.97", + "ccxt": "^1.40.1", "cexio-api-node": "^1.0.8", "cliff": "^0.1.10", "colors": "^1.2.1", @@ -72,7 +72,7 @@ "mime": "^2.2.2", "minimist": "^1.2.0", "mock-require": "^3.0.2", - "moment": "^2.22.0", + "moment": "^2.29.4", "mongodb": "^3.0.5", "node-bittrex-api": "^0.8.2", "node-prowl": "^0.1.7",