ibm / qjslib Goto Github PK

Tests for fetch timeouts sometimes fail due to the threshold being too small (1 ms). Can cause the tests to fail, it would be better if there was a bigger threshold to allow for variations in time taken to process.

Any chance for typescript support?

js-yaml vulnerability found in package-lock.json

Remediation
Upgrade js-yaml to version 3.13.1 or later. For example:

"dependencies": {
  "js-yaml": ">=3.13.1"
}

or…

"devDependencies": {
  "js-yaml": ">=3.13.1"
}

nodeca/js-yaml#480

WS-2019-0063 More information
Vulnerable versions: < 3.13.1
Patched version: 3.13.1
Js-yaml prior to 3.13.1 are vulnerable to Code Injection. The load() function may execute arbitrary code injected through a malicious YAML file.