Merge pull request #1 from pavoltravnik/security-fix-1589

Fixed https://npmjs.com/advisories/1589

README.md

@@ -2,6 +2,9 @@
 
 The non-configurable configuration loader for lazy people.
 
+This package is forked from [rc](https://github.com/dominictarr/rc/pull/121)
+Reason of fork [#121](https://github.com/dominictarr/rc/pull/121)
+
 ## Usage
 
 The only option is to pass rc the name of your app, and your default configuration.
@@ -191,7 +194,7 @@ Here is the expected output from various commands:
 }
 ```
 *Now the `port` comes from the `config.json` file specified (overriding the value from `.myapprc`), and `foo` value is overriden by command-line despite also being specified in the `config.json` file.*
- 
+
 
 
 ## Advanced Usage
@@ -219,7 +222,7 @@ such as strict, valid JSON only.
 
 ## Note on Performance
 
-`rc` is running `fs.statSync`-- so make sure you don't use it in a hot code path (e.g. a request handler) 
+`rc` is running `fs.statSync`-- so make sure you don't use it in a hot code path (e.g. a request handler)
 
 
 ## License

package.json

@@ -1,5 +1,5 @@
 {
-  "name": "rc",
+  "name": "rc-secure",
   "version": "1.2.8",
   "description": "hardwired configuration loader",
   "main": "index.js",
@@ -9,7 +9,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/dominictarr/rc.git"
+    "url": "https://github.com/pavoltravnik/rc-secure"
   },
   "license": "(BSD-2-Clause OR MIT OR Apache-2.0)",
   "keywords": [
@@ -22,8 +22,8 @@
   "author": "Dominic Tarr <[email protected]> (dominictarr.com)",
   "dependencies": {
     "deep-extend": "^0.6.0",
-    "ini": "~1.3.0",
-    "minimist": "^1.2.0",
-    "strip-json-comments": "~2.0.1"
+    "ini": "^2.0.0",
+    "minimist": "^1.2.5",
+    "strip-json-comments": "~3.1.1"
   }
 }