tsertkov / exec-sh / 59

100%

push

travis-ci

Remove dependency on potentially vulnerable merge package (#8)

* Be explicit in what the expected options are.

This will mean it won't automatically pick up changes to the defaults, but it also avoids restating the code used to make the merged options in order to test them.

* Avoid potential prototype injection from vulnerable dependency.

See https://hackerone.com/reports/381194

* Check that passing the nested structure for env variables works as expected.

* Update lock file for removed dependency.

20 of 20 branches covered (100.0%)

47 of 47 relevant lines covered (100.0%)

9.34 hits per line