[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	748/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.1	Improper Privilege Management SNYK-JS-SHELLJS-2332187	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: generator-node

The new version differs by 43 commits.

• ddd83c8 v2.4.0
• d6ad8eb Update Yarn lockfile
• c7c85e3 Update dependencies (#278)
• 129c233 Add support for scoped package (Fix #272) (#275)
• fd50d93 Setup coverage output in the terminal
• 4fec892 Replace deprecated prepublish by prepublishOnly (#271)
• 32f1c96 Correct opencollective badge
• 80e7e9c Update README.md (#270)
• e1260dc Bump dependencies
• a791156 Update the generator/git to ES6 Class (#269)
• ad88f00 Bump dependencies
• ad67e66 2.3.0
• 5c4e722 [Feature] Adding Pre-commit hook and Prettier (#267)
• ca86c07 2.2.0
• 9e71577 Bump dependencies (jest 20)
• 56aade7 2.1.0
• 4b9cc4e Generate .eslintignore file in eslint subgenerator (#264)
• f84d1b9 Remove mocha from package.json (#262)
• 056d739 2.0.1
• a1ea3db Fix: Make prompting function return consistent
• 43e684c Add instruction to setup third parties - Fix require('yeoman-generator').generators.Base is depricated. yeoman/generator-generator#146
• c637e9d Fix eslint config - Fix #260
• 61b05eb Full es6 and simplification
• 57ce4ff 2.0.0

See the full diff

Package name: yeoman-generator

The new version differs by 29 commits.

• d8253fc 2.0.3
• 971c1a8 Fix issue #1050 regarding unsecured dependencies (#1056)
• 150053c Update Travis version support
• 967cb0f 2.0.2
• d291b78 Bump dependencies
• f7b8167 fix: Do not apply user defaults when question.choices is a function. Fix #1051
• 825305e Fix typo in comment (#1044)
• 28cbab2 2.0.1
• 2955a84 Bump dependencies (+ security fix of debug)
• 9e4ccf5 2.0.0
• a29e5d9 Bump dependencies
• 96da393 Bump package-lock.json
• 4b1b841 Replace gulp with raw Mocha
• 6effbfe Use raw nsp
• 183b3a8 Get rid of before/after (toward jest migration)
• 68d59c1 Add package-lock.json
• f8e46b0 Don't die on diffing file deletions (again) (#1028)
• edc2bf2 [comments] Change wrong param name in description (#1018)
• 364606e Switch to `make-dir`
• eaf1ade New: option shorthand on installDependencies method (#1015)
• e296e52 Bump XO and minor style tweaks
• 9da7391 Bump dependencies
• b010701 More ES2015ifing
• cfd2a8e Refactor install methods to handle promises - ref #1006

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic