retire 3.0.5 → 3.0.6

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [3.0.6]
+
+### Security
+
+- Switch the `colors` package with `ansi-colors`
+
 ## [3.0.4] / [3.0.5]
 
 ### Security

package/bin/retire

@@ -12,7 +12,7 @@ var utils     = require('../lib/utils'),
     os        = require('os'),
     path      = require('path'),
     fs        = require('fs'),
-    colors    = require('colors/safe'),
+    colors    = require('ansi-colors'),
     emitter   = new require('events').EventEmitter;
 
 var events = new emitter();
@@ -32,9 +32,6 @@ var severityLevels = {
   critical: 4
 };
 
-colors.setTheme({
-  warn: 'red'
-});
 
 
 /*
@@ -80,7 +77,7 @@ if (!config.nocache && !config.cachedir) {
 
 config.ignore = config.ignore ? utils.map(config.ignore.split(','), function(e) { return path.resolve(e); }) : [];
 config.ignore = { paths : config.ignore, descriptors: [] };
-config.colorwarn = config.colors ? colors.warn : x => x;
+config.colorwarn = config.colors ? colors.red : x => x;
 
 if (!config.ignorefile) {
   config.ignorefile = defaultIgnoreFiles.filter(function(x){ return fs.existsSync(x); })[0];
@@ -203,7 +200,7 @@ events.on('scan-js', function() {
 });
 
 events.on('scan-node', function() {
-  console.warn('DEPRECATION NOTICE: The node scanning is deprecated and will be removed soon. See https://github.com/RetireJS/retire.js/wiki/Deprecating-the-node.js-scanner ')
+  console.warn('DEPRECATION NOTICE: The node scanning is deprecated and will be removed soon. See https://github.com/RetireJS/retire.js/wiki/Deprecating-the-node.js-scanner ');
   resolve.getNodeDependencies(config.nodepath || config.path, config.package).on('done', function(dependencies) {
     scanner.scanDependencies(dependencies, nodeRepo, config);
     events.emit('scan-done');

package/lib/retire.js

@@ -4,7 +4,7 @@
  */
 
 var exports = exports || {};
-exports.version = '3.0.5';
+exports.version = '3.0.6';
 
 function isDefined(o) {
 	return typeof o !== 'undefined';

package/package.json

@@ -2,7 +2,7 @@
   "author": "Erlend Oftedal <erlend@oftedal.no>",
   "name": "retire",
   "description": "Retire is a tool for detecting use of vulnerable libraries",
-  "version": "3.0.5",
+  "version": "3.0.6",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -13,16 +13,16 @@
   },
   "main": "./lib/retire.js",
   "dependencies": {
-    "colors": "1.4.0",
+    "ansi-colors": "^4.1.1",
     "commander": "2.5.x",
     "https-proxy-agent": "^5.0.0",
     "read-installed": "^4.0.3",
     "walkdir": "0.4.1"
   },
   "devDependencies": {
-    "chai": "^4.2.0",
+    "chai": "^4.3.4",
     "jshint": "^2.12.0",
-    "mocha": "^8.1.3"
+    "mocha": "^9.1.3"
   },
   "scripts": {
     "test": "./test"