Skip to content

Commit 1ce2b5e

Browse files
isaacstargos
isaacs
authored and
targos
committed
deps: upgrade npm to 6.10.0
PR-URL: #28525 Reviewed-By: Rich Trott <[email protected]> Reviewed-By: Roman Reiss <[email protected]> Reviewed-By: Trivikram Kamat <[email protected]> Reviewed-By: Yongsheng Zhang <[email protected]> Reviewed-By: Jiawen Geng <[email protected]> Reviewed-By: Ruben Bridgewater <[email protected]> Reviewed-By: Daijiro Wachi <[email protected]>
1 parent b379c0e commit 1ce2b5e

File tree

778 files changed

+19809
-12245
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

778 files changed

+19809
-12245
lines changed

‎deps/npm/.licensee.json

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,12 @@
11
{
2-
"license": "(MIT OR BSD-2-Clause OR BSD-3-Clause OR Apache-2.0 OR ISC OR Unlicense OR CC-BY-3.0 OR CC0-1.0 OR Artistic-2.0)",
2+
"licenses": {
3+
"spdx": [
4+
"CC-BY-3.0"
5+
],
6+
"blueOak": "bronze"
7+
},
38
"corrections": true,
4-
"whitelist": {
9+
"packages": {
510
"config-chain": "1.1.12",
611
"cyclist": "0.2.2",
712
"json-schema": "0.2.3",

‎deps/npm/.travis.yml

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -7,26 +7,24 @@ language: node_js
77
matrix:
88
include:
99
# LTS is our most important target
10-
- node_js: "10"
10+
- node_js: "12"
1111
# DEPLOY_VERSION is used to set the couchapp setup mode for test/tap/registry.js
1212
# only gather coverage info for LTS
1313
env: DEPLOY_VERSION=testing COVERALLS_REPO_TOKEN="$COVERALLS_OPTIONAL_TOKEN"
1414
script:
1515
- "node . run tap-cover -- \"test/tap/*.js\""
1616
- "unset COVERALLS_REPO_TOKEN ; node . run tap -- \"test/broken-under-*/*.js\""
1717
# previous LTS is next most important
18-
- node_js: "6"
19-
env: DEPLOY_VERSION=testing
20-
- node_js: "8"
21-
env: DEPLOY_VERSION=testing
22-
- node_js: "9"
23-
env: DEPLOY_VERSION=testing
24-
- node_js: "11"
18+
- node_js: "10"
2519
env: DEPLOY_VERSION=testing
2620
script:
2721
- "npx standard"
2822
- "node . run licenses"
2923
- "node . run tap -- \"test/tap/*.js\" \"test/broken-under-nyc/*.js\""
24+
- node_js: "8"
25+
env: DEPLOY_VERSION=testing
26+
- node_js: "6"
27+
env: DEPLOY_VERSION=testing
3028
notifications:
3129
slack: npm-inc:kRqQjto7YbINqHPb1X6nS3g8
3230
cache:

‎deps/npm/AUTHORS

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -630,3 +630,14 @@ Amadou Sall <[email protected]>
630630
Chris Manson <[email protected]>
631631
vlasy <[email protected]>
632632
Emilis Dambauskas (Tokenmill) <[email protected]>
633+
George Czabania <[email protected]>
634+
Jonathan Underwood <[email protected]>
635+
Nick Graef <[email protected]>
636+
James George <[email protected]>
637+
John O'Sullivan <[email protected]>
638+
ossdev <[email protected]>
639+
Raphael Goulais <[email protected]>
640+
COURIER, CALEB [AG/1000] <[email protected]>
641+
CalebCourier <[email protected]>
642+
Florian Keller <[email protected]>
643+
Sreeram Jayan <[email protected]>

‎deps/npm/CHANGELOG.md

Lines changed: 186 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,189 @@
1-
## v6.9.0 (2018-02-20):
1+
## v6.10.0 (2019-07-03):
2+
3+
### FEATURES
4+
5+
* [`87fef4e35`](https://github.com/npm/cli/commit/87fef4e35)
6+
[#176](https://github.com/npm/cli/pull/176) fix: Always return JSON for
7+
outdated --json ([@sreeramjayan](https://github.com/sreeramjayan))
8+
* [`f101d44fc`](https://github.com/npm/cli/commit/f101d44fc)
9+
[#203](https://github.com/npm/cli/pull/203) fix(unpublish): add space
10+
after hyphen ([@ffflorian](https://github.com/ffflorian))
11+
* [`a4475de4c`](https://github.com/npm/cli/commit/a4475de4c)
12+
[#202](https://github.com/npm/cli/pull/202) enable production flag for
13+
npm audit ([@CalebCourier](https://github.com/CalebCourier))
14+
* [`d192904d0`](https://github.com/npm/cli/commit/d192904d0)
15+
[#178](https://github.com/npm/cli/pull/178) fix: Return a value for
16+
`view` when in silent mode
17+
([@stayradiated](https://github.com/stayradiated))
18+
* [`39d473adf`](https://github.com/npm/cli/commit/39d473adf)
19+
[#185](https://github.com/npm/cli/pull/185) Allow git to follow global
20+
tagsign config ([@junderw](https://github.com/junderw))
21+
22+
### BUGFIXES
23+
24+
* [`d9238af0b`](https://github.com/npm/cli/commit/d9238af0b)
25+
[#201](https://github.com/npm/cli/pull/163)
26+
[npm/npm#17858](https://github.com/npm/npm/issues/17858)
27+
[npm/npm#18042](https://github.com/npm/npm/issues/18042)
28+
[npm.community#644](https://npm.community/t/644) do not crash when
29+
removing nameless packages
30+
([@SteveVanOpstal](https://github.com/SteveVanOpstal) and
31+
[@isaacs](https://github.com/isaacs))
32+
* [`4bec4f111`](https://github.com/npm/cli/commit/4bec4f111)
33+
[#200](https://github.com/npm/cli/pull/200) Check for `node` (as well as
34+
`node.exe`) in npm's local dir on Windows
35+
([@rgoulais](https://github.com/rgoulais))
36+
* [`ce93dab2d`](https://github.com/npm/cli/commit/ce93dab2db423ef23b3e08a0612dafbeb2d25789)
37+
[#180](https://github.com/npm/cli/pull/180)
38+
[npm.community#6187](https://npm.community/t/6187) Fix handling of
39+
`remote` deps in `npm outdated` ([@larsgw](https://github.com/larsgw))
40+
41+
### TESTING
42+
43+
* [`a823f3084`](https://github.com/npm/cli/commit/a823f3084) travis: Update
44+
to include new v12 LTS ([@isaacs](https://github.com/isaacs))
45+
* [`33e2d1dac`](https://github.com/npm/cli/commit/33e2d1dac) fix flaky
46+
debug-logs test ([@isaacs](https://github.com/isaacs))
47+
* [`e9411c6cd`](https://github.com/npm/cli/commit/e9411c6cd) Don't time out
48+
waiting for gpg user input ([@isaacs](https://github.com/isaacs))
49+
* [`d2d301704`](https://github.com/npm/cli/commit/d2d301704)
50+
[#195](https://github.com/npm/cli/pull/195) Add the arm64 check for
51+
legacy-platform-all.js test case.
52+
([@ossdev07](https://github.com/ossdev07))
53+
* [`a4dc34243`](https://github.com/npm/cli/commit/a4dc34243) parallel tests
54+
([@isaacs](https://github.com/isaacs))
55+
56+
### DOCUMENTATION
57+
58+
* [`f5857e263`](https://github.com/npm/cli/commit/f5857e263)
59+
[#192](https://github.com/npm/cli/pull/192) Clarify usage of
60+
bundledDependencies
61+
([@john-osullivan](https://github.com/john-osullivan))
62+
* [`747fdaf66`](https://github.com/npm/cli/commit/747fdaf66)
63+
[#159](https://github.com/npm/cli/pull/159) doc: add --audit-level param
64+
([@ngraef](https://github.com/ngraef))
65+
66+
### DEPENDENCIES
67+
68+
* [`e36b3c320`](https://github.com/npm/cli/commit/e36b3c320)
69+
[email protected] ([@isaacs](https://github.com/isaacs))
70+
* [`6bb935c09`](https://github.com/npm/cli/commit/6bb935c09)
71+
[email protected] ([@isaacs](https://github.com/isaacs))
72+
* [`e9cd536`](https://github.com/npm/read-package-tree/commit/e9cd536)
73+
Use custom caching `realpath` implementation, dramatically reducing
74+
`lstat` calls when reading the package tree
75+
([@isaacs](https://github.com/isaacs))
76+
* [`39538b460`](https://github.com/npm/cli/commit/39538b460)
77+
[email protected] ([@isaacs](https://github.com/isaacs))
78+
* [`f8b1552`](https://github.com/npm/write-file-atomic/commit/f8b1552)
79+
[#38](https://github.com/npm/write-file-atomic/pull/38) Ignore errors
80+
raised by `fs.closeSync` ([@lukeapage](https://github.com/lukeapage))
81+
* [`042193069`](https://github.com/npm/cli/commit/042193069) [email protected]
82+
([@isaacs](https://github.com/isaacs))
83+
* [`8bbd051`](https://github.com/npm/pacote/commit/8bbd051)
84+
[#172](https://github.com/zkat/pacote/pull/172) limit git retry
85+
times, avoid unlimited retries ([小秦](https://github.com/xqin))
86+
* [`92f5e4c`](https://github.com/npm/pacote/commit/92f5e4c)
87+
[#170](https://github.com/zkat/pacote/pull/170) fix(errors): Fix
88+
"TypeError: err.code.match is not a function" error
89+
([@jviotti](https://github.com/jviotti))
90+
* [`8bd8e909f`](https://github.com/npm/cli/commit/8bd8e909f) [email protected]
91+
([@isaacs](https://github.com/isaacs))
92+
* [`47de8f5`](https://github.com/npm/cacache/commit/47de8f5)
93+
[#146](https://github.com/zkat/cacache/pull/146)
94+
[npm.community#2395](https://npm.community/t/2395) fix(config): Add
95+
ssri config 'error' option ([@larsgw](https://github.com/larsgw))
96+
* [`5156561`](https://github.com/npm/cacache/commit/5156561)
97+
fix(write): avoid a `cb never called` situation
98+
([@zkat](https://github.com/zkat))
99+
* [`90f40f0`](https://github.com/npm/cacache/commit/90f40f0)
100+
[#166](https://github.com/zkat/cacache/pull/166)
101+
[#165](https://github.com/zkat/cacache/issues/165) docs: Fix docs for
102+
`path` property in get.info
103+
([@hdgarrood](https://github.com/hdgarrood))
104+
* [`bf61c45c6`](https://github.com/npm/cli/commit/bf61c45c6) [email protected]
105+
([@isaacs](https://github.com/isaacs))
106+
* [`f75d46a9d`](https://github.com/npm/cli/commit/f75d46a9d) [email protected]
107+
([@isaacs](https://github.com/isaacs))
108+
* [`c80341a`](https://github.com/npm/node-tar/commit/c80341a)
109+
[#215](https://github.com/npm/node-tar/pull/215) Fix
110+
encoding/decoding of base-256 numbers
111+
([@justfalter](https://github.com/justfalter))
112+
* [`77522f0`](https://github.com/npm/node-tar/commit/77522f0)
113+
[#204](https://github.com/npm/node-tar/issues/204)
114+
[#214](https://github.com/npm/node-tar/issues/214) Use `stat` instead
115+
of `lstat` when checking CWD ([@stkb](https://github.com/stkb))
116+
* [`ec6236210`](https://github.com/npm/cli/commit/ec6236210)
117+
[email protected] ([@isaacs](https://github.com/isaacs))
118+
* [`63d1e3e`](https://github.com/npm/npm-packlist/commit/63d1e3e)
119+
[#30](https://github.com/npm/npm-packlist/issues/30) Sort package
120+
tarball entries by file type for compression benefits
121+
([@isaacs](https://github.com/isaacs))
122+
* [`7fcd045`](https://github.com/npm/npm-packlist/commit/7fcd045)
123+
Ignore `.DS_Store` files as well as folders
124+
([@isaacs](https://github.com/isaacs))
125+
* [`68b7c96`](https://github.com/npm/npm-packlist/commit/68b7c96) Never
126+
include .git folders in package root. (Note: this prevents the issue
127+
that broke the v6.9.1 release.)
128+
([@isaacs](https://github.com/isaacs))
129+
* [`57bef61bc`](https://github.com/npm/cli/commit/57bef61bc) update fstream
130+
in node-gyp ([@isaacs](https://github.com/isaacs))
131+
* Addresses [security advisory
132+
#886](https://www.npmjs.com/advisories/886)
133+
* [`acbbf7eee`](https://github.com/npm/cli/commit/acbbf7eee)
134+
[#183](https://github.com/npm/cli/pull/183) [email protected]
135+
([@kemitchell](https://github.com/kemitchell))
136+
* [`011ae67f0`](https://github.com/npm/cli/commit/011ae67f0)
137+
[email protected] ([@isaacs](https://github.com/isaacs))
138+
* [`f5e884909`](https://github.com/npm/cli/commit/f5e884909)
139+
[email protected] ([@isaacs](https://github.com/isaacs))
140+
* [`b57d07e35`](https://github.com/npm/cli/commit/b57d07e35)
141+
[email protected] ([@isaacs](https://github.com/isaacs))
142+
143+
## v6.9.2 (2019-06-27):
144+
145+
This release is identical to v6.9.1, but we had to publish a new version
146+
due to [a .git directory in the release](https://npm.community/t/8454).
147+
148+
## v6.9.1 (2019-06-26):
149+
150+
### BUGFIXES
151+
152+
* [`6b1a9da0e`](https://github.com/npm/cli/commit/6b1a9da0e0f5c295cdaf4dea4b73bd221d778611)
153+
[#165](https://github.com/npm/cli/pull/165)
154+
Update `knownBroken` version.
155+
([@ljharb](https://github.com/ljharb))
156+
* [`d07547154`](https://github.com/npm/cli/commit/d07547154eb8a88aa4fde8a37e128e1e3272adc1)
157+
[npm.community#5929](https://npm.community/t/npm-outdated-throw-an-error-cannot-read-property-length-of-undefined/5929)
158+
Fix `outdated` rendering for global dependencies.
159+
([@zkat](https://github.com/zkat))
160+
* [`e4a1f1745`](https://github.com/npm/cli/commit/e4a1f174514a57580fd5e0fa33eee0f42bba77fc)
161+
[npm.community#6259](https://npm.community/t/npm-token-create-doesnt-work-in-6-6-0-6-9-0/6259)
162+
Fix OTP for token create and remove.
163+
([@zkat](https://github.com/zkat))
164+
165+
### DEPENDENCIES
166+
167+
* [`a163a9c35`](https://github.com/npm/cli/commit/a163a9c35f6f341de343562368056258bba5d7dc)
168+
`[email protected]`
169+
([@aeschright](https://github.com/aeschright))
170+
* [`47b08b3b9`](https://github.com/npm/cli/commit/47b08b3b9860438b416efb438e975a628ec2eed5)
171+
`[email protected]`
172+
([@aeschright](https://github.com/aeschright))
173+
* [`d6a956cff`](https://github.com/npm/cli/commit/d6a956cff6357e6de431848e578c391768685a64)
174+
`[email protected]`
175+
([@aeschright](https://github.com/aeschright))
176+
* [`10b8bed2b`](https://github.com/npm/cli/commit/10b8bed2bb0afac5451164e87f25924cc1ac6f2e)
177+
`[email protected]`
178+
([@aeschright](https://github.com/aeschright))
179+
* [`e7483704d`](https://github.com/npm/cli/commit/e7483704dda1acffc8c6b8c165c14c8a7512f3c8)
180+
`[email protected]`
181+
([@aeschright](https://github.com/aeschright))
182+
* [`3242fe698`](https://github.com/npm/cli/commit/3242fe698ead46a9cda94e1a4d489cd84a85d7e3)
183+
`[email protected]`
184+
([@aeschright](https://github.com/aeschright))
185+
186+
## v6.9.0 (2019-02-20):
2187

3188
### FEATURES
4189

‎deps/npm/bin/npm

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,9 @@ case `uname` in
88
esac
99

1010
NODE_EXE="$basedir/node.exe"
11+
if ! [ -x "$NODE_EXE" ]; then
12+
NODE_EXE="$basedir/node"
13+
fi
1114
if ! [ -x "$NODE_EXE" ]; then
1215
NODE_EXE=node
1316
fi

‎deps/npm/doc/cli/npm-audit.md

Lines changed: 15 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,10 @@ npm-audit(1) -- Run a security audit
33

44
## SYNOPSIS
55

6-
npm audit [--json|--parseable]
7-
npm audit fix [--force|--package-lock-only|--dry-run|--production|--only=dev]
6+
npm audit [--json|--parseable|--audit-level=(low|moderate|high|critical)]
7+
npm audit fix [--force|--package-lock-only|--dry-run]
8+
9+
common options: [--production] [--only=(dev|prod)]
810

911
## EXAMPLES
1012

@@ -60,6 +62,11 @@ To parse columns, you can use for example `awk`, and just print some of them:
6062
$ npm audit --parseable | awk -F $'\t' '{print $1,$4}'
6163
```
6264

65+
Fail an audit only if the results include a vulnerability with a level of moderate or higher:
66+
```
67+
$ npm audit --audit-level=moderate
68+
```
69+
6370
## DESCRIPTION
6471

6572
The audit command submits a description of the dependencies configured in
@@ -75,6 +82,12 @@ runs a full-fledged `npm install` under the hood, all configs that apply to the
7582
installer will also apply to `npm install` -- so things like `npm audit fix
7683
--package-lock-only` will work as expected.
7784

85+
By default, the audit command will exit with a non-zero code if any vulnerability
86+
is found. It may be useful in CI environments to include the `--audit-level` parameter
87+
to specify the minimum vulnerability level that will cause the command to fail. This
88+
option does not filter the report output, it simply changes the command's failure
89+
threshold.
90+
7891
## CONTENT SUBMITTED
7992

8093
* npm_version

‎deps/npm/doc/files/package.json.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -648,7 +648,8 @@ If we define a package.json like this:
648648
we can obtain `awesome-web-framework-1.0.0.tgz` file by running `npm pack`.
649649
This file contains the dependencies `renderized` and `super-streams` which
650650
can be installed in a new project by executing `npm install
651-
awesome-web-framework-1.0.0.tgz`.
651+
awesome-web-framework-1.0.0.tgz`. Note that the package names do not include
652+
any versions, as that information is specified in `dependencies`.
652653

653654
If this is spelled `"bundleDependencies"`, then that is also honored.
654655

‎deps/npm/html/doc/README.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -118,5 +118,5 @@ <h2 id="see-also">SEE ALSO</h2>
118118
<tr><td style="width:60px;height:10px;background:rgb(237,127,127)" colspan=6>&nbsp;</td><td colspan=10 style="width:10px;height:10px;background:rgb(237,127,127)">&nbsp;</td></tr>
119119
<tr><td colspan=5 style="width:50px;height:10px;background:#fff">&nbsp;</td><td style="width:40px;height:10px;background:rgb(237,127,127)" colspan=4>&nbsp;</td><td style="width:90px;height:10px;background:#fff" colspan=9>&nbsp;</td></tr>
120120
</table>
121-
<p id="footer"><a href="../doc/README.html">README</a> &mdash; npm@6.9.0</p>
121+
<p id="footer"><a href="../doc/README.html">README</a> &mdash; npm@6.10.0</p>
122122

‎deps/npm/html/doc/cli/npm-access.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -93,5 +93,5 @@ <h2 id="see-also">SEE ALSO</h2>
9393
<tr><td style="width:60px;height:10px;background:rgb(237,127,127)" colspan=6>&nbsp;</td><td colspan=10 style="width:10px;height:10px;background:rgb(237,127,127)">&nbsp;</td></tr>
9494
<tr><td colspan=5 style="width:50px;height:10px;background:#fff">&nbsp;</td><td style="width:40px;height:10px;background:rgb(237,127,127)" colspan=4>&nbsp;</td><td style="width:90px;height:10px;background:#fff" colspan=9>&nbsp;</td></tr>
9595
</table>
96-
<p id="footer">npm-access &mdash; npm@6.9.0</p>
96+
<p id="footer">npm-access &mdash; npm@6.10.0</p>
9797

‎deps/npm/html/doc/cli/npm-adduser.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -78,5 +78,5 @@ <h2 id="see-also">SEE ALSO</h2>
7878
<tr><td style="width:60px;height:10px;background:rgb(237,127,127)" colspan=6>&nbsp;</td><td colspan=10 style="width:10px;height:10px;background:rgb(237,127,127)">&nbsp;</td></tr>
7979
<tr><td colspan=5 style="width:50px;height:10px;background:#fff">&nbsp;</td><td style="width:40px;height:10px;background:rgb(237,127,127)" colspan=4>&nbsp;</td><td style="width:90px;height:10px;background:#fff" colspan=9>&nbsp;</td></tr>
8080
</table>
81-
<p id="footer">npm-adduser &mdash; npm@6.9.0</p>
81+
<p id="footer">npm-adduser &mdash; npm@6.10.0</p>
8282

‎deps/npm/html/doc/cli/npm-audit.html

Lines changed: 12 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -11,8 +11,10 @@
1111

1212
<h1><a href="../cli/npm-audit.html">npm-audit</a></h1> <p>Run a security audit</p>
1313
<h2 id="synopsis">SYNOPSIS</h2>
14-
<pre><code>npm audit [--json|--parseable]
15-
npm audit fix [--force|--package-lock-only|--dry-run|--production|--only=dev]</code></pre><h2 id="examples">EXAMPLES</h2>
14+
<pre><code>npm audit [--json|--parseable|--audit-level=(low|moderate|high|critical)]
15+
npm audit fix [--force|--package-lock-only|--dry-run]
16+
17+
common options: [--production] [--only=(dev|prod)]</code></pre><h2 id="examples">EXAMPLES</h2>
1618
<p>Scan your project for vulnerabilities and automatically install any compatible
1719
updates to vulnerable dependencies:</p>
1820
<pre><code>$ npm audit fix</code></pre><p>Run <code>audit fix</code> without modifying <code>node_modules</code>, but still updating the
@@ -29,7 +31,8 @@ <h2 id="synopsis">SYNOPSIS</h2>
2931
future reuse in scripting or command line post processing, like for example, selecting
3032
some of the columns printed:</p>
3133
<pre><code>$ npm audit --parseable</code></pre><p>To parse columns, you can use for example <code>awk</code>, and just print some of them:</p>
32-
<pre><code>$ npm audit --parseable | awk -F $&#39;\t&#39; &#39;{print $1,$4}&#39;</code></pre><h2 id="description">DESCRIPTION</h2>
34+
<pre><code>$ npm audit --parseable | awk -F $&#39;\t&#39; &#39;{print $1,$4}&#39;</code></pre><p>Fail an audit only if the results include a vulnerability with a level of moderate or higher:</p>
35+
<pre><code>$ npm audit --audit-level=moderate</code></pre><h2 id="description">DESCRIPTION</h2>
3336
<p>The audit command submits a description of the dependencies configured in
3437
your project to your default registry and asks for a report of known
3538
vulnerabilities. The report returned includes instructions on how to act on
@@ -41,6 +44,11 @@ <h2 id="synopsis">SYNOPSIS</h2>
4144
runs a full-fledged <code>npm install</code> under the hood, all configs that apply to the
4245
installer will also apply to <code>npm install</code> -- so things like <code>npm audit fix
4346
--package-lock-only</code> will work as expected.</p>
47+
<p>By default, the audit command will exit with a non-zero code if any vulnerability
48+
is found. It may be useful in CI environments to include the <code>--audit-level</code> parameter
49+
to specify the minimum vulnerability level that will cause the command to fail. This
50+
option does not filter the report output, it simply changes the command&#39;s failure
51+
threshold.</p>
4452
<h2 id="content-submitted">CONTENT SUBMITTED</h2>
4553
<ul>
4654
<li>npm_version</li>
@@ -86,4 +94,4 @@ <h2 id="see-also">SEE ALSO</h2>
8694
<tr><td style="width:60px;height:10px;background:rgb(237,127,127)" colspan=6>&nbsp;</td><td colspan=10 style="width:10px;height:10px;background:rgb(237,127,127)">&nbsp;</td></tr>
8795
<tr><td colspan=5 style="width:50px;height:10px;background:#fff">&nbsp;</td><td style="width:40px;height:10px;background:rgb(237,127,127)" colspan=4>&nbsp;</td><td style="width:90px;height:10px;background:#fff" colspan=9>&nbsp;</td></tr>
8896
</table>
89-
<p id="footer">npm-audit &mdash; npm@6.9.0</p>
97+
<p id="footer">npm-audit &mdash; npm@6.10.0</p>

‎deps/npm/html/doc/cli/npm-bin.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,5 +34,5 @@ <h2 id="see-also">SEE ALSO</h2>
3434
<tr><td style="width:60px;height:10px;background:rgb(237,127,127)" colspan=6>&nbsp;</td><td colspan=10 style="width:10px;height:10px;background:rgb(237,127,127)">&nbsp;</td></tr>
3535
<tr><td colspan=5 style="width:50px;height:10px;background:#fff">&nbsp;</td><td style="width:40px;height:10px;background:rgb(237,127,127)" colspan=4>&nbsp;</td><td style="width:90px;height:10px;background:#fff" colspan=9>&nbsp;</td></tr>
3636
</table>
37-
<p id="footer">npm-bin &mdash; npm@6.9.0</p>
37+
<p id="footer">npm-bin &mdash; npm@6.10.0</p>
3838

‎deps/npm/html/doc/cli/npm-bugs.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,5 +54,5 @@ <h2 id="see-also">SEE ALSO</h2>
5454
<tr><td style="width:60px;height:10px;background:rgb(237,127,127)" colspan=6>&nbsp;</td><td colspan=10 style="width:10px;height:10px;background:rgb(237,127,127)">&nbsp;</td></tr>
5555
<tr><td colspan=5 style="width:50px;height:10px;background:#fff">&nbsp;</td><td style="width:40px;height:10px;background:rgb(237,127,127)" colspan=4>&nbsp;</td><td style="width:90px;height:10px;background:#fff" colspan=9>&nbsp;</td></tr>
5656
</table>
57-
<p id="footer">npm-bugs &mdash; npm@6.9.0</p>
57+
<p id="footer">npm-bugs &mdash; npm@6.10.0</p>
5858

0 commit comments

Comments
 (0)