Indirect dependency trim-newlines <3.0.1 reported high servery vulnerability

[jgomesmv]

Installed Version:
1.7.0

NPM Version:
8.5.5

Dependency Tree:
nps-utils > cpy-cli > meow> trim-newlines

[justinhelmer]

More info: The copy and open commands are affected (copy uses cpy-cli and open uses opn-cli)

• cpy-cli is three major versions behind (referenced: 1.0.1, current: 4.2.0)
• opn-cli has been deprecated and renamed to open-cli. The current version is 7.2.0.

Since nps-utils doesn't do anything other than pass the arguments directly to the binaries, this should be an easy change to upgrade to the new versions.

[jgomesmv]

It seems we have two PR's open to update dependencies:
#46
#34

Can one of the contributors take a look?
@wmertens @huy-nguyen @mikecann @gunnx @erikras @jemhuntr

Cheers!

[Ido-Levi]

Are there any updates?

[justinhelmer]

JFYI I ended up moving away from this package and just using concurrently for my nps util needs because it doesn't seem to be actively maintained.