SAP / ui5-cli / 21286352775 / 1

96%

main: 96%

push

github

[DEPENDENCY] Bump tar from 6.2.1 to 7.5.6

Resolves alerts for several security advisories such as:
https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w
https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97

As per our assessment those vulnerabilities are not exploitable in the context of UI5 CLI.

The override for tar is specifically defined where necessary in order to not downgrade tar
in case a new major version is being used by other dependencies.

348 of 365 branches covered (95.34%)

Branch coverage included in aggregate %.

682 of 705 relevant lines covered (96.74%)

8.38 hits per line