[Snyk] Security upgrade webpack-cli from 2.1.5 to 3.0.0

[kingjay66]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • demo/webpack/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: webpack-cli

The new version differs by 6 commits.

• b1e7ef3 break: update pkg.json
• 4857b9d break: webpack-cli v.3.0.0
• 660ce95 v0.0.8
• 9d3c9c1 v0.0.7
• 138adfd BREAKING: webpack-cli v3 (Support for Twig/Django templates ajaxorg/ace#448)
• 03c1969 chore(deps): Update nyc to the latest version 🚀 (Can Ace use non-monospaced fonts? ajaxorg/ace#476)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Control of Dynamically-Managed Code Resources

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/asset-smasher@0.2.0	filesystem	+10	1.01 MB	jriecken
npm/browser-pack@5.0.1	filesystem Transitive: environment	+12	398 kB	zertosh
npm/browserify@10.2.4	network, unsafe Transitive: environment, eval, filesystem	+50	2.25 MB	zertosh
npm/cson@3.0.1	unsafe	0	351 kB	balupton
npm/css-parse@1.0.3	None	0	6.72 kB
npm/css-stringify@1.0.3	None	0	5.37 kB
npm/deps-sort@1.3.9	Transitive: environment	+6	139 kB	zertosh
npm/derequire@2.0.0	Transitive: environment, filesystem	+21	1.3 MB	cwmma
npm/panino@2.2.6	filesystem Transitive: environment	+7	2.57 MB	gjtorikian
npm/plist@3.0.5	None	+1	542 kB	mreinstein
npm/webpack-cli@3.3.12	environment, filesystem, shell, unsafe Transitive: network	+157	3.63 MB	evilebottnawi

🚮 Removed packages: npm/webpack-cli@2.1.5

View full report↗︎

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source
New author	npm/uuid@3.4.0	New Author: ctavan Previous Author: broofa	demo/webpack/package.json
Environment variable access	npm/npm-run-path@2.0.2	Env Vars: Location: Package overview	demo/webpack/package.json
Environment variable access	npm/npm-run-path@2.0.2	Env Vars: Location: Package overview	demo/webpack/package.json
Filesystem access	npm/browser-resolve@1.11.3	Module: fs Location: Package overview	tool/package.json
Environment variable access	npm/execa@1.0.0	Env Vars: Location: Package overview	demo/webpack/package.json
Shell access	npm/execa@1.0.0	Module: child_process Location: Package overview	demo/webpack/package.json
Environment variable access	npm/execa@1.0.0	Env Vars: comspec Location: Package overview	demo/webpack/package.json
Trivial Package	npm/pinkie-promise@2.0.1	Location: Package overview	demo/webpack/package.json
Debug access	npm/on-finished@2.4.1	Module: async_hooks Location: Package overview	demo/webpack/package.json
Network access	npm/methods@1.1.2	Module: http Location: Package overview	demo/webpack/package.json
Uses eval	npm/depd@1.1.2	Eval Type: eval Location: Package overview	demo/webpack/package.json
Environment variable access	npm/depd@1.1.2	Env Vars: NO_DEPRECATION Location: Package overview	demo/webpack/package.json
Environment variable access	npm/depd@1.1.2	Env Vars: TRACE_DEPRECATION Location: Package overview	demo/webpack/package.json
Dynamic require	npm/default-gateway@4.2.0	Location: Package overview	demo/webpack/package.json
Environment variable access	npm/depd@2.0.0	Env Vars: NO_DEPRECATION Location: Package overview	demo/webpack/package.json
Environment variable access	npm/depd@2.0.0	Env Vars: TRACE_DEPRECATION Location: Package overview	demo/webpack/package.json
Uses eval	npm/depd@2.0.0	Eval Type: Function Location: Package overview	demo/webpack/package.json
Filesystem access	npm/destroy@1.2.0	Module: fs Location: Package overview	demo/webpack/package.json
Filesystem access	npm/etag@1.8.1	Module: fs Location: Package overview	demo/webpack/package.json
Environment variable access	npm/finalhandler@1.2.0	Env Vars: NODE_ENV Location: Package overview	demo/webpack/package.json
Filesystem access	npm/mime@1.6.0	Module: fs Location: Package overview	demo/webpack/package.json
Environment variable access	npm/mime@1.6.0	Env Vars: DEBUG_MIME Location: Package overview	demo/webpack/package.json
Network access	npm/ws@6.2.2	Module: http Location: Package overview	demo/webpack/package.json
Network access	npm/ws@6.2.2	Module: tls Location: Package overview	demo/webpack/package.json
Network access	npm/ws@6.2.2	Module: net Location: Package overview	demo/webpack/package.json
Network access	npm/ws@6.2.2	Module: https Location: Package overview	demo/webpack/package.json
New author	npm/querystringify@2.2.0	New Author: lpinca Previous Author: 3rdeden	demo/webpack/package.json
Filesystem access	npm/send@0.18.0	Module: fs Location: Package overview	demo/webpack/package.json
Network access	npm/send@0.18.0	Module: http-errors Location: Package overview	demo/webpack/package.json
Environment variable access	npm/global-modules@2.0.0	Env Vars: OSTYPE Location: Package overview	demo/webpack/package.json
Environment variable access	npm/global-prefix@3.0.0	Env Vars: Location: Package overview	demo/webpack/package.json
Network access	npm/faye-websocket@0.11.4	Module: tls Location: Package overview	demo/webpack/package.json
Network access	npm/faye-websocket@0.11.4	Module: net Location: Package overview	demo/webpack/package.json
Network access	npm/websocket-driver@0.7.4	Module: http-parser-js Location: Package overview	demo/webpack/package.json
Network access	npm/eventsource@2.0.2	Module: http Location: Package overview	demo/webpack/package.json
Network access	npm/eventsource@2.0.2	Module: https Location: Package overview	demo/webpack/package.json
New author	npm/tty-browserify@0.0.1	New Author: goto-bus-stop Previous Author: substack	tool/package.json
Network access	npm/http-proxy@1.18.1	Module: https Location: Package overview	demo/webpack/package.json
Network access	npm/http-proxy@1.18.1	Module: http Location: Package overview	demo/webpack/package.json
New author	npm/defined@1.0.1	New Author: ljharb Previous Author: substack	tool/package.json
Network access	npm/body-parser@1.20.2	Module: http-errors Location: Package overview	demo/webpack/package.json
Debug access	npm/raw-body@2.5.2	Module: async_hooks Location: Package overview	demo/webpack/package.json
Network access	npm/raw-body@2.5.2	Module: http-errors Location: Package overview	demo/webpack/package.json
Filesystem access	npm/findup-sync@3.0.0	Module: fs Location: Package overview	demo/webpack/package.json
Filesystem access	npm/detect-file@1.0.0	Module: fs Location: Package overview	demo/webpack/package.json
Environment variable access	npm/ansi-colors@3.2.4	Env Vars: Location: Package overview	demo/webpack/package.json
Environment variable access	npm/ansi-colors@3.2.4	Env Vars: FORCE_COLOR Location: Package overview	demo/webpack/package.json
Trivial Package	npm/array-union@1.0.2	Location: Package overview	demo/webpack/package.json
Network access	npm/bonjour@3.5.0	Module: dns-txt Location: Package overview	demo/webpack/package.json
Network access	npm/bonjour@3.5.0	Module: dns-equal Location: Package overview	demo/webpack/package.json
Network access	npm/multicast-dns@6.2.3	Module: dgram Location: Package overview	demo/webpack/package.json
Network access	npm/multicast-dns@6.2.3	Module: dns-packet Location: Package overview	demo/webpack/package.json
Shell access	npm/opn@5.5.0	Module: child_process Location: Package overview	demo/webpack/package.json
Filesystem access	npm/serve-index@1.9.1	Module: fs Location: Package overview	demo/webpack/package.json
Network access	npm/serve-index@1.9.1	Module: http-errors Location: Package overview	demo/webpack/package.json
Network access	npm/spdy@4.0.2	Module: http Location: Package overview	demo/webpack/package.json
Network access	npm/spdy@4.0.2	Module: net Location: Package overview	demo/webpack/package.json
Network access	npm/spdy@4.0.2	Module: http-deceiver Location: Package overview	demo/webpack/package.json
Network access	npm/spdy@4.0.2	Module: https Location: Package overview	demo/webpack/package.json
Network access