tree 053d75ade23efe976dcd9772c0265f758e8aaacb
parent 3f4ef51b7ba9c347ebc7bca151d19a6bc55a5309
author M. J. Fromberger <michael.j.fromberger@gmail.com> 1557867295 -0700
committer Sal <salguarnieri@google.com> 1557867295 -0700

fix: update vulnerable outdated js-yaml NPM package (#3740)

A run of `npm audit` reported the following vulnerabilities:

$ npm audit
│ Moderate      │ Denial of Service
│ Package       │ js-yaml
│ Dependency of │ @commitlint/cli [dev]
│ Path          │ @commitlint/cli > @commitlint/load > cosmiconfig > js-yaml
│ More info     │ https://npmjs.com/advisories/788

│ High          │ Code Injection
│ Package       │ js-yaml
│ Dependency of │ @commitlint/cli [dev]
│ Path          │ @commitlint/cli > @commitlint/load > cosmiconfig > js-yaml
│ More info     │ https://npmjs.com/advisories/813

This change was proposed by `npm audit fix` to update the package lock.