[Snyk] Fix for 12 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • test/fixtures/qs-package/node_modules/hosted-git-info/package.json
  • test/fixtures/qs-package/node_modules/hosted-git-info/.snyk

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-450202	Yes	Proof of Concept
	731/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.2	Prototype Pollution SNYK-JS-LODASH-567746	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-73638	Yes	Proof of Concept
	541/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-1019388	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:lodash:20180130	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) npm:minimatch:20160620	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: standard

The new version differs by 250 commits.

• 39a54d3 6.0.0
• 3afcc2c CHANGELOG.md for 6.0.0
• 0b71b07 eslint-plugin-promise@1.0.8
• 4b725bd lock to latest deps
• 0a9a77b eslint-config-standard@5.0.0
• 48fb60c add eslint-config-standard-jsx
• 8802ea7 run standard on ourselves
• 6fbd66d test: add --disabled flag to run disabled tests
• 910eaa5 depend on eslint-plugin-promise
• f0d1983 Remove React-specific rules (fixes [Snyk] Security upgrade cookie-session from 1.1.0 to 1.3.0 #351)
• 8a095f1 readme: add one more gotcha
• fbb66c4 package.json
• 44b551a remove one more usage of `win-spawn`
• f1ad085 eslint@^2.0.0-rc.0
• 1cdd9f5 clone test: ignore git output
• 22971ce use cross-spawn-async
• 3e2001d add standard-format instructions to --format
• 60d4a87 install babel in dev-deps for test repos that need it
• 134de73 use standard-packages@3
• f149307 cleanup
• 3c86923 remove standard-format. fixes [Snyk] Fix for 1 vulnerabilities #340
• 9b3a14d test: add --quiet option
• c59a55c test: test 500+ standard packages
• cb625b4 test: add command line --help test

See the full diff

Package name: tap

The new version differs by 172 commits.

• 963943e v1.0.8
• 2a76bb6 use glob 5
• 247dadc Remove deps that are no longer used
• 7492ec4 handle slow ok.js test run in test/runner.js
• 9754119 v1.0.7
• 3056f4d use upstream js-yaml
• c38c7e8 v1.0.6
• a2720d6 isc license
• 30ca273 v1.0.5
• 495e05c Don't lose - arg from glob
• 1533ea1 stack: don't read indexOf if file is unset
• 22680b0 Fail unfinished tests
• 7d073be v1.0.4
• ead7bf4 Exclude .tap files from publish
• 418a7dc v1.0.3
• ff9af3d run: perform globbing on path arguments
• a970809 add todo: more mocha globals when you tap.mochaGlobals()
• b8ba7bb v1.0.2
• 7680b79 empty tests are not failures now (they're skips)
• b295aee spawn: empty tests that exit non-zero are failures
• e50a299 typo in mochalike test
• 7b0423c verify that top-level tests can be defined asynchronously
• 75b5b6c v1.0.1
• f477c87 spawn: emit a 'skip' for tests that do nothing

See the full diff

With a Snyk patch:

Severity	Priority Score (*)	Issue	Exploit Maturity
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:lodash:20180130	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution