gettyimages / gettyimages-api_nodejs / 30367945734

98%

main: 98%

Pull #80

github

Remove unused coveralls dependency to fix form-data vulnerability

coveralls pulled in the deprecated request package, which pins
form-data to a version vulnerable to predictable multipart boundary
generation (CVE-2025-7783, GHSA-fjxv-7rqg-78g4). Coverage reporting
is already handled by the coverallsapp/github-action in CI, so the
npm package was unused and can be dropped entirely.

Fixes GHSA-fjxv-7rqg-78g4

94 of 115 branches covered (81.74%)

1025 of 1045 relevant lines covered (98.09%)

113.94 hits per line