[Snyk] Fix for 1 vulnerabilities

[s4sc]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • tools/eslint/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: chalk

The new version differs by 53 commits.

• 3fca615 2.0.0
• f66271e Add tagged template literal (io.js TC Meeting 2014-12-17 nodejs/node#163)
• 23ef1c7 fix linter errors
• c015568 add rainbow example
• 09fb2d8 Re-implement `chalk.enabled` (buffer: add indexOf method nodejs/node#160)
• 608242a spoof supports-color
• 18f2e7c add host information output
• 523b998 Revert "TEMPORARY: emergency travis CI fix (see comments)"
• 54975fb TEMPORARY: emergency travis CI fix (see comments)
• 1d73b21 Improve readme
• 6f4d6b3 Bump dependencies
• 8702496 Remove `chalk.styles`
• 0412cdf Minor code improvements
• 249b9ac ES2015ify the codebase
• cb3f230 Add RGB (256/Truecolor) support (install,windows: symlink iojs -> node? nodejs/node#140)
• dbae68d Update dependent package count in the readme (src: fix addon loader regression nodejs/node#154)
• 9b60021 Drop support for Node.js 0.10 and 0.12
• 0d21449 check parent builder object for enabled status (docs: Supplement docs for Writable and Transform streams nodejs/node#142)
• 5a69476 add XO badge
• 492f11f add example file
• 4ce73b6 make XO happy
• 7c02cf4 Add log statement to chalk examples (test: fix test-fs-symlink-dir-junction-relative nodejs/node#129)
• 835ca3d You've just reached 10,000 dependent modules. (add flock API to fs module nodejs/node#122)
• 74c087d minor doc improvements (Embeddable concept nodejs/node#120)

See the full diff

Package name: inquirer

The new version differs by 250 commits.

• 54285c7 Publish
• a2a751a Update dependencies
• 3986ea3 Update lerna to use yarn
• 7bcb7d3 close keypress stream when rl close (doc: add geek as collaborator nodejs/node#835)
• 83e8727 Update lodash (Cherrypick commits from joyent/node nodejs/node#834)
• 2fbec5c Bump dependencies
• 5c9f9e0 Fix typo (tls: more secure defaults nodejs/node#826)
• da5d0e2 Publish
• e05ae81 Issue 711 update (readline: use native codePointAt nodejs/node#825)
• dbfe890 Clear password field on backspace ([stream] Standardize a way for writable streams to do work after all data has been consumed. nodejs/node#821)
• e14796b Upgrade lodash to 4.17.12 to Fix Vulnerability (doc: mark class should have a reasonable contrast ratio nodejs/node#824)
• 29ac965 Update husky to the latest version 🚀 (Translate installers for OS X and Windows nodejs/node#819)
• d82131e Update lint-staged to the latest version 🚀 (Perfect Forward Secrecy: Default ciphers and Chrome nodejs/node#818)
• 1f849ab feat: add inquirer-file-tree-selection-prompt readme (doc: Fix grammar so sentence makes sense nodejs/node#815)
• b951b48 Publish
• aeab66e Revert "Remove all event listeners on close to avoid memory leak (doc: Change straight quotes to curly quotes nodejs/node#808)" (infinite loop with crypto.randomBytes() causing 100% CPU hang nodejs/node#813)
• 5f0b513 Publish
• 38569a3 Bump dependencies
• 705e9cc Remove all event listeners on close to avoid memory leak (doc: Change straight quotes to curly quotes nodejs/node#808)
• 91a4d59 Remove paginated option from example (doc: fix grammar in fs.appendFile nodejs/node#801)
• c64cf89 Update husky to the latest version 🚀 (src: remove trailing whitespace nodejs/node#798)
• e41c61d Setup publishConfig to public
• ee1cc70 Publish
• 8535305 Add number support for choices prompt (please remove node symlink from iojs installer nodejs/node#796)

See the full diff

Package name: table

The new version differs by 35 commits.

• ec3f883 chore: fix build process
• 946000f chore: re-add Flow
• ca8a1d7 chore: remove Flow
• 449382a feat: give a facelift
• d160abd docs: correct drawHorizontalLine reference reference (closes npm install is unbelievably slow, fails in certain environments nodejs/node#54)
• d56164c chore: move dependencies not use in src code into devDependencies (extending options from a prototype nodejs/node#62)
• 15f762a style: use Object.values (fixes transform streams: unpipe or ignore future writes after .push(null) nodejs/node#64)
• ce6066f chore: switch to babel-preset-env (Deprecate domains nodejs/node#75)
• 7bd7eaa feat: update JSON schemas to draft-07 (may be it's good idea go tell something about this fork? nodejs/node#74)
• 8d1a44e fix: linting on TravisCI and add new Node.js version to the testing matrix (doc: fixes grammar nodejs/node#76)
• 5d0c174 fix: proposal for Is V8 the best JS engine today? nodejs/node#72 (The README is oriented towards Node nodejs/node#73)
• bd4d09e 4.0.3
• eec96ab feat: update ajv to version 6. (Proposal: Comment all the code nodejs/node#60)
• fb821f9 docs: update README.md (My contribution to this logo throw in. nodejs/node#61)
• 0dad920 refactor: replace lodash with native ES5/ES6 methods where possible (What goes in core / stdlib.js? nodejs/node#59)
• 5ae209b chore: update mocha to version & indicate supported node versions in package.json (module: test for directories, fixes require with .. nodejs/node#58)
• 5f6e334 fix: update `ajv-keywords` from v.2.1.0 to v.2.1.1 (fs: fix fd leak in ReadStream.destroy() nodejs/node#56)
• badda76 4.0.2
• 94cb88b style:
• 8d367c8 fix: update dependencies (fixes debugger: use requireRepl() to load debugger repl nodejs/node#49)
• 41cacb6 fix: remove lodash
• a419632 refactor: converting lodash to es6 (Gitter chat room? nodejs/node#39)
• b297d7e refactor: removing lodash dependency ([Snyk] Fix for 1 vulnerabilities #37)
• b3dcadb refactor: removing lodash dependency ([Snyk] Security upgrade request from 2.75.0 to 2.88.2 #36)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.