[Snyk] Security upgrade npm from 9.4.2 to 10.9.2

[gitafolabi]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	646

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled Resource Consumption ('Resource Exhaustion')

[dryrunsecurity]

DryRun Security Summary

The pull request updates the npm dependency version from 9.1.2 to 10.9.2, which is a routine update that requires thorough testing to ensure no regressions or compatibility issues are introduced.

Expand for full summary

Summary:

The changes in this pull request appear to be a routine update to the npm dependency version from 9.1.2 to 10.9.2. Updating to the latest version of npm is generally a good practice, as it can include bug fixes, security patches, and new features. However, it's important to thoroughly test the application after updating any dependencies to ensure that the changes do not introduce any regressions or compatibility issues.

From a security perspective, there are a few key considerations to keep in mind, such as ensuring that the application is not relying on any outdated or vulnerable dependencies, verifying the integrity and authenticity of the npm package being used, and ensuring that the application's environment is properly configured with appropriate access controls, logging, and monitoring in place. Overall, the changes in this pull request do not appear to raise any immediate security concerns, but it's crucial to follow best practices for dependency management and supply chain security to maintain the application's security posture.

Files Changed:

• package.json: This file has been updated to use the latest version of the npm package, from 9.1.2 to 10.9.2. This is a routine update that is often necessary to keep dependencies up-to-date and secure.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

View PR in the DryRun Dashboard.