cm45t3r / candlestick / 24480357476

99%

push

github

chore(deps): fix 6 dev dependency vulnerabilities via npm audit fix

Updated transitive dev dependencies (ESLint/c8 toolchain):
- ajv: 6.12.6 → 6.14.0 (ReDoS with $data option)
- brace-expansion: 1.1.12 → 1.1.14, 2.0.2 → 2.1.0 (zero-step sequence DoS)
- flatted: 3.3.3 → 3.4.2 (unbounded recursion DoS + prototype pollution)
- glob: 10.4.5 → 10.5.0 (command injection via -c/--cmd)
- js-yaml: 4.1.0 → 4.1.1 (prototype pollution via merge)
- minimatch: multiple versions patched (ReDoS via wildcards/extglobs)

No runtime dependencies affected (library has zero production deps).
306/306 tests pass after update.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

777 of 803 branches covered (96.76%)

Branch coverage included in aggregate %.

2474 of 2480 relevant lines covered (99.76%)

23981.88 hits per line