From 95579789ee0d4ce80e6e2a4f5c8837cb6665c1ba Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 7 Apr 2022 16:59:35 +0000 Subject: [PATCH] fix: package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ASYNC-2441827 --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 8d3a4e7d2..d9b2cb5e7 100644 --- a/package.json +++ b/package.json @@ -46,7 +46,7 @@ "bitcoind" ], "dependencies": { - "async": "^1.3.0", + "async": "^3.2.2", "bindings": "^1.2.1", "bitcore-lib": "^0.13.13", "body-parser": "^1.13.3", @@ -60,7 +60,7 @@ "memdown": "^1.0.0", "mkdirp": "0.5.0", "nan": "^2.0.9", - "npm": "^2.14.1", + "npm": "^3.0.0", "semver": "^5.0.1", "socket.io": "bitpay/socket.io#bitpay-1.3.7", "socket.io-client": "bitpay/socket.io-client#bitpay-1.3.7"