Snyk has created this PR to upgrade node-pre-gyp from 0.6.39 to 0.14.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 13 versions ahead of your current version.
• The recommended version was released 5 months ago, on 2019-10-25.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Prototype Pollution npm:deep-extend:20180409	No Known Exploit
	Prototype Pollution npm:hoek:20180212	No Known Exploit

Release notes
Package name: node-pre-gyp

• 0.14.0 - 2019-10-25
• 0.13.0 - 2019-04-23
• 0.12.0 - 2018-11-15
  

  Preparing 0.12.0 release.

• 0.11.0 - 2018-08-12
  

  add latest node v10 versions

• 0.10.3 - 2018-07-09
• 0.10.2 - 2018-06-24
  

  v0.10.2

• 0.10.1 - 2018-06-23
  

  v0.10.1

• 0.10.1-dev.1 - 2018-06-21
  

  v0.10.1-dev.1

• 0.10.0 - 2018-05-01
  

  v0.10.0

• 0.9.1 - 2018-04-12
  

  v0.9.1

• 0.9.0 - 2018-03-14
  

  v0.9.0

• 0.8.0 - 2018-03-10
  

  v0.8.0

• 0.7.0 - 2018-03-10
• 0.6.39 - 2017-11-02

from node-pre-gyp GitHub release notes Commit messages
Package name: node-pre-gyp

• ef634f9 Merge pull request Remove unneeded connect call from push example nodegit/nodegit#483 from murgatroid99/abi_crosswalk_update_13
• 3328a3f Merge pull request Automatically free repositories post clone nodegit/nodegit#434 from murgatroid99/load_time_npmlog
• 1b4e1ba Also include Automatically free repositories post clone nodegit/nodegit#434 in the changelog
• c6901a6 Update version to 0.14 and update changelog
• f29251b Update ABI crosswalk with new information
• 590da56 Merge pull request Suppress astyle errors nodegit/nodegit#459 from murtadha/local_mirror
• 8a33f18 Support extracting compiled binary from local offline mirror
• f8f2e30 Merge pull request StrArray memory fix nodegit/nodegit#454 from sneakypete81/patch-1
• 4dc4ee7 [Security] Bump tar from ^4 to ^4.4.2
• 1d019f9 Merge pull request Default signature always returns valid signature nodegit/nodegit#450 from nicolasnoble/bump-0.13
• e2b61cc Merge pull request Enable git_config  nodegit/nodegit#449 from nicolasnoble/node-12
• 59d28d5 Bumping to version 0.13.
• 333de58 Updating abi crosswalk.
• df4a05c Defer modules requires in napi.js
• ff9e93e Merge pull request git_create_tag doesn't have the correct descriptor nodegit/nodegit#430 from nicolasnoble/0.12.changelog
• 67c156e Merge pull request Change environment to default for upgraded service nodegit/nodegit#428 from nicolasnoble/double-download-callback-fix
• f983095 Merge pull request Fix indexEntry construction and blobFromBuffer nodegit/nodegit#422 from nicolasnoble/node11
• 5a80bf9 Preparing 0.12.0 release.
• 3611c9f Updating latest crosswalk again.
• 40833a4 Fixes the double-download-callback issue.
• f356b37 Updating crosswalk information.
• d606a69 add latest node v10 versions
• 7785e06 bump to v0.11.0
• 674fda7 Merge pull request Tree Entry getBlob() should also support the callback pattern. nodegit/nodegit#405 from jschlight/napi-improvements

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs