[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: chalk

The new version differs by 91 commits.

• a838948 1.1.2
• ff2c3ea Merge pull request undefined callback causing mean-init to crash linnovate/mean-cli#104 from popey456963/patch-1
• 426fc48 7,700 Dependent Modules
• 9001b39 Updates maintainer email.
• 308f6b6 minor tweaks
• 18c64ad cleanup Fix packages installed with mean init prompt. linnovate/mean-cli#92
• 05f87e2 Close Fix packages installed with mean init prompt. linnovate/mean-cli#92 PR: Closing before and reopening the style after a line break.
• 139f8b6 add Code of Conduct
• 51b8f32 6700 dependents! 🔥
• 8417f17 Close Don't assume shell.exec() is synchronous linnovate/mean-cli#95 PR: tweak defining proto.
• a301cbf Merge pull request Mean package should create CRUD routes and functions rather than current routes linnovate/mean-cli#97 from stevemao/missing-tests
• 8ec46cf Merge pull request mean list should list every package installed linnovate/mean-cli#96 from stevemao/bump-deps
• 337f9c7 add missing tests
• 5679ec0 bump deps
• b8e7da6 Merge pull request Better error reporting. (Prompted by mean register and mean init) linnovate/mean-cli#93 from venning/master
• 7c40059 Use HTTPS for shields.io unicorn badge; raises mixed-content warning on npmjs.com
• c2ef5b8 Merge pull request prompt user with checklist to install contrib packages linnovate/mean-cli#91 from vdemedes/remove-extra-deps
• 04cae22 remove has-ansi and strip-ansi dependencies
• 83615f2 clarify docs about using console.log
• ed6e7d5 Close Provide a more descriptive error upon executing as sudo/root when bower fails. linnovate/mean-cli#86 PR: Add ES2015 template literal example. Fixes UI: mean-init myApp linnovate/mean-cli#77
• 8d59997 readme tweaks
• 262274a add `slice-ansi` to related section in readme
• 60b0a74 Merge pull request Prompt users to confirm they want to init/install as root. linnovate/mean-cli#85 from jorrit/patch-1
• 641ae57 New URL for cmder

See the full diff

Package name: npm

The new version differs by 178 commits.

• 1569304 3.0.0
• d67d437 [email protected]
• 2becdc3 [email protected]
• 3501f22 src: Fix one last standard style issue
• 0772c95 changelog: Add two more known bugs
• 283eef4 changelog: minor tweaks that didn't make it in prior to merging
• 064d62c changelog for 3.0.0
• a306446 test: more descriptive assertions + assertion label
• 6aa6754 uninstall: Support "no arguments"=global action semantics
• a526b60 gitignore: Ignore dev subdep unpipe
• 57328de test: Only run standard once regardless of how we invoke tests
• 65cc653 pack: fix infinite loop when packing w/ node_modules w/ dep cycles
• 532dfc1 [email protected]
• b50be6a src: make the npm source comply with `standard`
• 7c5ebe0 ls: Don't error on missing optional deps
• ae1f202 travis: Use the version of npm being tested
• 231a582 building npm: Yell if you try to package npm@3 with npm@2
• 2da0ce8 install: Run top level lifecycles AFTER rolling back failed optdeps
• 8a814a6 recalculate-metadata: don't compute missing dev deps for subdeps
• 1b71c55 install: save: Don't sort the top level package.json keys
• bc46ca9 install: Make shrinkwrap extraction work in 0.8
• 8fb8b4a install: Move more npm config into the installer object
• 3cdbce3 install: Refactor --link to behave better
• 9e030f7 publish: Throw an error if the bundled deps package.json entry is invalid

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic