From 75998b9ad432e8bb111857ef4f7f31b7d4bbb761 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 29 Jan 2026 10:45:13 +0000 Subject: [PATCH 1/2] fix: workspaces/libnpmfund/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TAR-15032660 - https://snyk.io/vuln/SNYK-JS-TAR-15127355 --- workspaces/libnpmfund/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/workspaces/libnpmfund/package.json b/workspaces/libnpmfund/package.json index bd7358e53701f..55954e483856d 100644 --- a/workspaces/libnpmfund/package.json +++ b/workspaces/libnpmfund/package.json @@ -45,7 +45,7 @@ "tap": "^16.3.4" }, "dependencies": { - "@npmcli/arborist": "^6.2.8" + "@npmcli/arborist": "^9.0.0" }, "engines": { "node": "^14.17.0 || ^16.13.0 || >=18.0.0" From 819feb02c35ed8443b41ed7ec9711d4a4e0e428d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 1 Feb 2026 12:03:26 +0000 Subject: [PATCH 2/2] fix: workspaces/libnpmfund/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TAR-15032660 - https://snyk.io/vuln/SNYK-JS-TAR-15127355