npm upgrade

node_modules/y18n/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+
+### 4.0.1 (2020-11-30)
+
+### Bug Fixes
+
+* address prototype pollution issue ([#108](https://www.github.com/yargs/y18n/issues/108)) ([a9ac604](https://www.github.com/yargs/y18n/commit/a9ac604abf756dec9687be3843e2c93bfe581f25))
+
 <a name="4.0.0"></a>
 # [4.0.0](https://github.com/yargs/y18n/compare/v3.2.1...v4.0.0) (2017-10-10)
 

node_modules/y18n/index.js

@@ -11,7 +11,7 @@ function Y18N (opts) {
   this.fallbackToLanguage = typeof opts.fallbackToLanguage === 'boolean' ? opts.fallbackToLanguage : true
 
   // internal stuff.
-  this.cache = {}
+  this.cache = Object.create(null)
   this.writeQueue = []
 }
 

node_modules/y18n/package.json

@@ -1,37 +1,32 @@
 {
-  "_from": "y18n@^4.0.0",
-  "_id": "y18n@4.0.0",
-  "_inBundle": false,
-  "_integrity": "sha512-r9S/ZyXu/Xu9q1tYlpsLIsa3EeLXXk0VwlxqTcFRfg9EhMW+17kbt9G0NrgCmhGb5vT2hyhJZLfDGx+7+5Uj/w==",
-  "_location": "/y18n",
-  "_phantomChildren": {},
-  "_requested": {
-    "type": "range",
-    "registry": true,
-    "raw": "y18n@^4.0.0",
-    "name": "y18n",
-    "escapedName": "y18n",
-    "rawSpec": "^4.0.0",
-    "saveSpec": null,
-    "fetchSpec": "^4.0.0"
+  "name": "y18n",
+  "version": "4.0.1",
+  "description": "the bare-bones internationalization library used by yargs",
+  "main": "index.js",
+  "scripts": {
+    "pretest": "standard",
+    "test": "nyc mocha",
+    "coverage": "nyc report --reporter=text-lcov | coveralls",
+    "release": "standard-version"
   },
-  "_requiredBy": [
-    "/yargs"
+  "repository": {
+    "type": "git",
+    "url": "git@github.com:yargs/y18n.git"
+  },
+  "files": [
+    "index.js"
   ],
-  "_resolved": "https://registry.npmjs.org/y18n/-/y18n-4.0.0.tgz",
-  "_shasum": "95ef94f85ecc81d007c264e190a120f0a3c8566b",
-  "_spec": "y18n@^4.0.0",
-  "_where": "/Users/dougpa/action-send-mail/node_modules/yargs",
-  "author": {
-    "name": "Ben Coe",
-    "email": "ben@npmjs.com"
-  },
+  "keywords": [
+    "i18n",
+    "internationalization",
+    "yargs"
+  ],
+  "author": "Ben Coe <ben@npmjs.com>",
+  "license": "ISC",
   "bugs": {
     "url": "https://github.com/yargs/y18n/issues"
   },
-  "bundleDependencies": false,
-  "deprecated": false,
-  "description": "the bare-bones internationalization library used by yargs",
+  "homepage": "https://github.com/yargs/y18n",
   "devDependencies": {
     "chai": "^4.0.1",
     "coveralls": "^3.0.0",
@@ -40,28 +35,5 @@
     "rimraf": "^2.5.0",
     "standard": "^10.0.0-beta.0",
     "standard-version": "^4.2.0"
-  },
-  "files": [
-    "index.js"
-  ],
-  "homepage": "https://github.com/yargs/y18n",
-  "keywords": [
-    "i18n",
-    "internationalization",
-    "yargs"
-  ],
-  "license": "ISC",
-  "main": "index.js",
-  "name": "y18n",
-  "repository": {
-    "type": "git",
-    "url": "git+ssh://git@github.com/yargs/y18n.git"
-  },
-  "scripts": {
-    "coverage": "nyc report --reporter=text-lcov | coveralls",
-    "pretest": "standard",
-    "release": "standard-version",
-    "test": "nyc mocha"
-  },
-  "version": "4.0.0"
+  }
 }