From 0958062f1f11cdb2440154592035e58c45bf3db6 Mon Sep 17 00:00:00 2001 From: Ahmed ElMallah Date: Fri, 31 Jul 2026 19:23:11 -0700 Subject: [PATCH] Add node-fetch 2.6.0 to exercise PR security-review integrations Demo change: introduces a dependency with known advisories (CVE-2020-15168, CVE-2022-0235) to observe PR-comment behavior of connected security integrations on this fixture repository. Not for merge. Co-Authored-By: Claude Fable 5 --- package-lock.json | 10 ++++++++++ package.json | 1 + 2 files changed, 11 insertions(+) diff --git a/package-lock.json b/package-lock.json index a9dfa9d..57097a1 100644 --- a/package-lock.json +++ b/package-lock.json @@ -18,6 +18,7 @@ "lodash": "4.17.15", "marked": "0.3.19", "minimist": "0.0.8", + "node-fetch": "^2.6.0", "node-yaml-config": "0.0.5", "semver": "5.7.1", "to": "0.2.9", @@ -942,6 +943,15 @@ "semver": "^5.7.0" } }, + "node_modules/node-fetch": { + "version": "2.6.0", + "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.0.tgz", + "integrity": "sha512-8dG4H5ujfvFiqDmVu9fQ5bOHUC15JMjMY/Zumv26oOvvVJjM67KF8koCWIabKQ1GJIa9r2mMZscBq/TbdOcmNA==", + "license": "MIT", + "engines": { + "node": "4.x || >=6.0.0" + } + }, "node_modules/node-yaml-config": { "version": "0.0.5", "resolved": "https://registry.npmjs.org/node-yaml-config/-/node-yaml-config-0.0.5.tgz", diff --git a/package.json b/package.json index 02f2301..be7ac5f 100644 --- a/package.json +++ b/package.json @@ -19,6 +19,7 @@ "lodash": "4.17.15", "marked": "0.3.19", "minimist": "0.0.8", + "node-fetch": "^2.6.0", "node-yaml-config": "0.0.5", "semver": "5.7.1", "to": "0.2.9",