From 4ebe9cd035d208f5021beaa44245252f80dbea4d Mon Sep 17 00:00:00 2001 From: sawez-deepsource Date: Fri, 12 Jun 2026 10:03:21 +0530 Subject: [PATCH 1/2] Update package.json metadata Add format script, code-quality keyword, and prettier devDependency; remove the bugs field. --- package.json | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 60b9a214..cf968936 100644 --- a/package.json +++ b/package.json @@ -7,7 +7,8 @@ "scripts": { "start": "node index.js", "test": "echo \"No tests configured\" && exit 0", - "lint": "eslint ." + "lint": "eslint .", + "format": "prettier --write ." }, "repository": { "type": "git", @@ -17,15 +18,16 @@ "javascript", "static-analysis", "deepsource", - "linting" + "linting", + "code-quality" ], "author": "Moulik Aggarwal", "license": "ISC", "engines": { "node": ">=18" }, - "bugs": { - "url": "https://github.com/deepsourcelabs/demo-js/issues" + "devDependencies": { + "prettier": "^3.3.0" }, "homepage": "https://github.com/deepsourcelabs/demo-js#readme" } From 6eea7278ce5d2168ffaa75b491f2a1d438e6ff20 Mon Sep 17 00:00:00 2001 From: DeepSource Bot Date: Tue, 16 Jun 2026 09:42:57 +0000 Subject: [PATCH 2/2] =?UTF-8?q?fix(deps):=20update=20npm/launch-editor=20f?= =?UTF-8?q?rom=202.2.1=20=E2=86=92=202.14.1=20fix(deps):=20update=20npm/la?= =?UTF-8?q?unch-editor=20from=202.2.1=20=E2=86=92=202.14.1?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This pull request addresses security vulnerabilities in this repository by updating dependencies to a safe version. We recommend manually auditing the package manifest files to verify the fixes. ### Upgrade Summary **launch-editor**: 2.2.1 → 2.14.1 - Fixes [CVE-2024-52011](https://nvd.nist.gov/vuln/detail/CVE-2024-52011) (High severity) - References: - [https://github.com/vitejs/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf](https://github.com/vitejs/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf) - [https://github.com/yyx990803/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf](https://github.com/yyx990803/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf) - [https://nvd.nist.gov/vuln/detail/CVE-2024-52011](https://nvd.nist.gov/vuln/detail/CVE-2024-52011) - [https://github.com/vitejs/launch-editor/commit/971291e8a6a91226e1616c5c0ec85423d2d50a5e](https://github.com/vitejs/launch-editor/commit/971291e8a6a91226e1616c5c0ec85423d2d50a5e) - [https://github.com/vitejs/launch-editor](https://github.com/vitejs/launch-editor) --- 🤖 This pull request was automatically generated by DeepSource SCA. To view all vulnerabilities in this repository, please visit the [dashboard](https://app.deepsource.one/gh/CyberdyneHQ/demo-javascript/dependencies/). --- packages/demo-nuxt/package.json | 2 +- packages/demo-nuxt/yarn.lock | 25 +++++++++++++++---------- 2 files changed, 16 insertions(+), 11 deletions(-) diff --git a/packages/demo-nuxt/package.json b/packages/demo-nuxt/package.json index 072f6cfd..c6b12134 100644 --- a/packages/demo-nuxt/package.json +++ b/packages/demo-nuxt/package.json @@ -15,4 +15,4 @@ "nuxt": "^2.15.7" }, "devDependencies": {} -} \ No newline at end of file +} diff --git a/packages/demo-nuxt/yarn.lock b/packages/demo-nuxt/yarn.lock index acad2adf..65873da3 100644 --- a/packages/demo-nuxt/yarn.lock +++ b/packages/demo-nuxt/yarn.lock @@ -2274,7 +2274,7 @@ chalk@^1.1.3: strip-ansi "^3.0.0" supports-color "^2.0.0" -chalk@^2.0.0, chalk@^2.3.0, chalk@^2.3.2, chalk@^2.4.1, chalk@^2.4.2: +chalk@^2.0.0, chalk@^2.3.2, chalk@^2.4.1, chalk@^2.4.2: version "2.4.2" resolved "https://registry.yarnpkg.com/chalk/-/chalk-2.4.2.tgz#cd42541677a54333cf541a49108c1432b44c9424" integrity sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ== @@ -4541,12 +4541,12 @@ launch-editor-middleware@^2.2.1: launch-editor "^2.2.1" launch-editor@^2.2.1: - version "2.2.1" - resolved "https://registry.yarnpkg.com/launch-editor/-/launch-editor-2.2.1.tgz#871b5a3ee39d6680fcc26d37930b6eeda89db0ca" - integrity sha512-On+V7K2uZK6wK7x691ycSUbLD/FyKKelArkbaAMSSJU8JmqmhwN2+mnJDNINuJWSrh2L0kDk+ZQtbC/gOWUwLw== + version "2.14.1" + resolved "https://registry.yarnpkg.com/launch-editor/-/launch-editor-2.14.1.tgz#f7e0da3f58aaea03fea01074d840b5f739ed7ddc" + integrity sha512-QWBrQsMpH7gPr965dsKD/3cKWiNoTjpATQf++Xq63N6sKRGMwlVXz41O1IZTMfZQgBctD/K5Zt06+/I6pP6+HA== dependencies: - chalk "^2.3.0" - shell-quote "^1.6.1" + picocolors "^1.1.1" + shell-quote "^1.8.4" loader-runner@^2.4.0: version "2.4.0" @@ -5480,6 +5480,11 @@ pbkdf2@^3.0.3: safe-buffer "^5.0.1" sha.js "^2.4.8" +picocolors@^1.1.1: + version "1.1.1" + resolved "https://registry.yarnpkg.com/picocolors/-/picocolors-1.1.1.tgz#3d321af3eab939b083c8f929a1d12cda81c26b6b" + integrity sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA== + picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3: version "2.3.0" resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.0.tgz#f1f061de8f6a4bf022892e2d128234fb98302972" @@ -6800,10 +6805,10 @@ shebang-regex@^3.0.0: resolved "https://registry.yarnpkg.com/shebang-regex/-/shebang-regex-3.0.0.tgz#ae16f1644d873ecad843b0307b143362d4c42172" integrity sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A== -shell-quote@^1.6.1: - version "1.7.2" - resolved "https://registry.yarnpkg.com/shell-quote/-/shell-quote-1.7.2.tgz#67a7d02c76c9da24f99d20808fcaded0e0e04be2" - integrity sha512-mRz/m/JVscCrkMyPqHc/bczi3OQHkLTqXHEFu0zDhK/qfv3UcOA4SVmRCLmos4bhjr9ekVQubj/R7waKapmiQg== +shell-quote@^1.8.4: + version "1.8.4" + resolved "https://registry.yarnpkg.com/shell-quote/-/shell-quote-1.8.4.tgz#2edd9a4dcefc96649e2e2cb12f637b1f1d92a190" + integrity sha512-VsC6n6vz1ihYYyZZwX7YZSF5l5x36ca17OC+a69h94YqB7X6XLwf+5MOgynYir2SLFUbl8gIYvBo8K8RoNQ6bQ== side-channel@^1.0.4: version "1.0.4"