serenity-js / serenity-js / #631 / 1

80%

main: 96%

push

fix(security): removed colors > 1.4.0 from Serenity/JS monorepo

Malicious code introduced in colors.js v1.4.1 and 1.4.2 causes all versions of Cucumber.js to fall
into an infinite loop; to avoid the issue, projects consuming Cucumber.js should specify an explicit
dependency on colors 1.4.0 until cucumber/cucumber-js#1885 is addressed. For more information, see

881 of 1247 branches covered (70.65%)

Branch coverage included in aggregate %.

4228 of 5167 relevant lines covered (81.83%)

25.8 hits per line