danmasta / mocha-sonar Goto Github PK

Breaks:

it('should set the `username` & `password` from the options', () => {
   ...
});

minimatch  <3.0.5
Severity: high
minimatch ReDoS vulnerability - https://github.com/advisories/GHSA-f8q6-p94x-37v3
No fix available
node_modules/@danmasta/mocha-sonar/node_modules/minimatch
  mocha  5.1.0 - 9.2.1
  Depends on vulnerable versions of minimatch
  Depends on vulnerable versions of nanoid
  node_modules/@danmasta/mocha-sonar/node_modules/mocha
    @danmasta/mocha-sonar  *
    Depends on vulnerable versions of mocha
    node_modules/@danmasta/mocha-sonar

nanoid  3.0.0 - 3.1.30
Severity: moderate
Exposure of Sensitive Information to an Unauthorized Actor in nanoid - https://github.com/advisories/GHSA-qrpm-p2h7-hrv2
No fix available
node_modules/@danmasta/mocha-sonar/node_modules/nanoid

├─┬ @danmasta/[email protected]
│ └─┬ [email protected]
│   └── [email protected]

├─┬ @danmasta/[email protected]
│ └─┬ [email protected]
│   ├─┬ [email protected]
│   │ └── [email protected] deduped
│   └── [email protected]