UI5 / linter / 21287390188

87%

push

github

deps: Bump tar from 6.2.1 to 7.5.6

Resolves alerts for several security advisories such as:
https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w
https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97

As per our assessment those vulnerabilities are not exploitable in the context of UI5 linter.

The override for tar is specifically defined where necessary in order to not downgrade tar
in case a new major version is being used by other dependencies.

This commit also includes a minor bump of lodash to address https://github.com/advisories/GHSA-xxjr-mmjv-4gpg
which is also not exploitable in the context of UI5 linter and only used as a development dependency.

4140 of 4994 branches covered (82.9%)

Branch coverage included in aggregate %.

5901 of 6577 relevant lines covered (89.72%)

7371.02 hits per line