fix build

Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-02-04 10:56:29 +01:00
parent 2441d1cf59
commit 1dd5a02e91
14 changed files with 103 additions and 126 deletions
@@ -14,3 +14,5 @@
 ---

 chore(deps): bump `knex` from 0.95.6 to 1.0.2
+
+This also replaces `sqlite3` with `@vscode/sqlite3` 5.0.7
@@ -0,0 +1,58 @@
+---
+'@backstage/create-app': patch
+---
+
+**BREAKING:** Updated `knex` to major version 1, which also implies changing out
+the underlying `sqlite` implementation.
+
+The old `sqlite3` NPM library has been abandoned by its maintainers, which has
+led to unhandled security reports and other issues. Therefore, in the `knex` 1.x
+release line they have instead switched over to the [`@vscode/sqlite3`
+library](https://github.com/microsoft/vscode-node-sqlite3) by default, which is
+actively maintained by Microsoft.
+
+This means that as you update to this version of Backstage, there are two
+breaking changes that you will have to address in your own repository:
+
+## Bumping `knex` itself
+
+All `package.json` files of your repo that used to depend on a 0.x version of
+`knex`, should now be updated to depend on the 1.x release line. This applies in
+particular to `packages/backend`, but may also occur in backend plugins or
+libraries.
+
+```diff
+-    "knex": "^0.95.1",
+    "knex": "^1.0.2",
+```
+
+Almost all existing database code will continue to function without modification
+after this bump. The only significant difference that we discovered in the main
+repo, is that the `alter()` function had a slightly different signature in
+migration files. It now accepts an object with `alterType` and `alterNullable`
+fields that clarify a previous grey area such that the intent of the alteration
+is made explicit. This is caught by `tsc` and your editor if you are using the
+`@ts-check` and `@param` syntax in your migration files
+([example](https://github.com/backstage/backstage/blob/master/plugins/catalog-backend/migrations/20220116144621_remove_legacy.js#L17)),
+which we strongly recommend.
+
+See the [`knex` documentation](https://knexjs.org/#Schema-alter) for more
+information about the `alter` syntax.
+
+Also see the [`knex` changelog](https://knexjs.org/#changelog) for information
+about breaking changes in the 1.x line; if you are using `RETURNING` you may
+want to make some additional modifications in your code.
+
+## Switching out `sqlite3`
+
+All `package.json` files of your repo that used to depend on `sqlite3`, should
+now be updated to depend on `@vscode/sqlite3`. This applies in particular to
+`packages/backend`, but may also occur in backend plugins or libraries.
+
+```diff
+-    "sqlite3": "^5.0.1",
+    "@vscode/sqlite3": "^5.0.7",
+```
+
+These should be functionally equivalent, except that the new library will have
+addressed some long standing problems with old transitive dependencies etc.
@@ -177,7 +177,7 @@ export const createDatabase: typeof createDatabaseClient;
 export function createDatabaseClient(
  dbConfig: Config,
  overrides?: Partial<Knex.Config>,
-): Knex<any, unknown[]>;
+): Knex<any, Record<string, any>[]>;

 // @public
 export function createRootLogger(
@@ -33,10 +33,10 @@
    "@backstage/backend-common": "^0.10.6",
    "@backstage/cli": "^0.13.1",
    "@backstage/config": "^0.1.13",
+    "@vscode/sqlite3": "^5.0.7",
    "knex": "^1.0.2",
    "mysql2": "^2.2.5",
    "pg": "^8.3.0",
-    "sqlite3": "^5.0.1",
    "testcontainers": "^8.1.2",
    "uuid": "^8.0.0"
  },
@@ -58,6 +58,7 @@
    "@backstage/plugin-todo-backend": "^0.1.20",
    "@gitbeaker/node": "^35.1.0",
    "@octokit/rest": "^18.5.3",
+    "@vscode/sqlite3": "^5.0.7",
    "azure-devops-node-api": "^11.0.1",
    "dockerode": "^3.3.1",
    "example-app": "link:../app",
@@ -68,7 +69,6 @@
    "pg": "^8.3.0",
    "pg-connection-string": "^2.3.0",
    "prom-client": "^14.0.1",
-    "sqlite3": "^5.0.1",
    "winston": "^3.2.1"
  },
  "devDependencies": {
@@ -208,6 +208,6 @@ describe('templatingTask', () => {
    // backend dependencies include `sqlite3` from `context.SQLite`
    expect(
      fs.readFileSync('templatedApp/packages/backend/package.json', 'utf-8'),
-    ).toContain('"sqlite3"');
+    ).toContain('sqlite3"');
  });
 });
@@ -40,7 +40,7 @@
    "pg": "^8.3.0",
    {{/if}}
    {{#if dbTypeSqlite}}
-    "sqlite3": "^5.0.1",
+    "@vscode/sqlite3": "^5.0.7",
    {{/if}}
    "winston": "^3.2.1"
  },
@@ -28,7 +28,7 @@ exports.up = async function up(knex) {
        .notNullable()
        .defaultTo(knex.fn.now())
        .comment('The creation time of the key')
-        .alter();
+        .alter({ alterType: true });
    });
  }
 };
@@ -45,7 +45,7 @@ exports.down = async function down(knex) {
        .notNullable()
        .defaultTo(knex.fn.now())
        .comment('The creation time of the key')
-        .alter();
+        .alter({ alterType: true });
    });
  }
 };
@@ -23,7 +23,7 @@ exports.up = async function up(knex) {
  // Sqlite does not support alter column.
  if (knex.client.config.client !== 'sqlite3') {
    await knex.schema.alterTable('entities_search', table => {
-      table.text('value').nullable().alter();
+      table.text('value').nullable().alter({ alterType: true });
    });
  }
 };
@@ -35,7 +35,7 @@ exports.down = async function down(knex) {
  // Sqlite does not support alter column.
  if (knex.client.config.client !== 'sqlite3') {
    await knex.schema.alterTable('entities_search', table => {
-      table.string('value').nullable().alter();
+      table.string('value').nullable().alter({ alterType: true });
    });
  }
 };
@@ -33,7 +33,7 @@ exports.up = async function up(knex) {
  // SQLite does not support alter column
  if (knex.client.config.client !== 'sqlite3') {
    await knex.schema.alterTable('entities', table => {
-      table.text('full_name').notNullable().alter();
+      table.text('full_name').notNullable().alter({ alterNullable: true });
    });
  }

@@ -43,7 +43,7 @@ exports.up = async function up(knex) {
  // SQLite does not support ALTER COLUMN.
  if (knex.client.config.client !== 'sqlite3') {
    await knex.schema.alterTable('entities', table => {
-      table.text('data').notNullable().alter();
+      table.text('data').notNullable().alter({ alterNullable: true });
    });
  }
 };
@@ -26,8 +26,8 @@ exports.up = async function up(knex) {
    await knex.schema
      .raw('DROP VIEW location_update_log_latest;')
      .alterTable('location_update_log', table => {
-        table.text('message').alter();
-        table.text('entity_name').nullable().alter();
+        table.text('message').alter({ alterType: true });
+        table.text('entity_name').nullable().alter({ alterType: true });
      }).raw(`
        CREATE VIEW location_update_log_latest AS
        SELECT t1.* FROM location_update_log t1
@@ -53,8 +53,8 @@ exports.down = async function down(knex) {
    await knex.schema
      .raw('DROP VIEW location_update_log_latest;')
      .alterTable('location_update_log', table => {
-        table.string('message').alter();
-        table.string('entity_name').nullable().alter();
+        table.string('message').alter({ alterType: true });
+        table.string('entity_name').nullable().alter({ alterType: true });
      }).raw(`
        CREATE VIEW location_update_log_latest AS
        SELECT t1.* FROM location_update_log t1
@@ -75,9 +75,9 @@
    "@types/supertest": "^2.0.8",
    "@types/uuid": "^8.0.0",
    "@types/yup": "^0.29.13",
+    "@vscode/sqlite3": "^5.0.7",
    "aws-sdk-mock": "^5.2.1",
    "msw": "^0.35.0",
-    "sqlite3": "^5.0.1",
    "supertest": "^6.1.3",
    "wait-for-expect": "^3.0.2",
    "luxon": "^2.0.2"
@@ -6457,6 +6457,13 @@
    "@typescript-eslint/types" "5.9.1"
    eslint-visitor-keys "^3.0.0"

+"@vscode/sqlite3@^5.0.7":
+  version "5.0.7"
+  resolved "https://registry.npmjs.org/@vscode/sqlite3/-/sqlite3-5.0.7.tgz#358df36bb0e9e735c54785e3e4b9b2dce1d32895"
+  integrity sha512-NlsOf+Hir2r4zopI1qMvzWXPwPJuFscirkmFTniTAT24Yz2FWcyZxzK7UT8iSNiTqOCPz48yF55ZVHaz7tTuVQ==
+  dependencies:
+    node-addon-api "^4.2.0"
+
 "@webassemblyjs/ast@1.11.1":
  version "1.11.1"
  resolved "https://registry.npmjs.org/@webassemblyjs/ast/-/ast-1.11.1.tgz#2bfd767eae1a6996f432ff7e8d7fc75679c0b6a7"
@@ -7745,13 +7752,6 @@ blob-util@^2.0.2:
  resolved "https://registry.npmjs.org/blob-util/-/blob-util-2.0.2.tgz#3b4e3c281111bb7f11128518006cdc60b403a1eb"
  integrity sha512-T7JQa+zsXXEa6/8ZhHcQEW1UFfVM49Ts65uBkFL6fz2QmrElqmbajIDJvuA0tEhRe5eIjpV9ZF+0RfZR9voJFQ==

-block-stream@*:
-  version "0.0.9"
-  resolved "https://registry.npmjs.org/block-stream/-/block-stream-0.0.9.tgz#13ebfe778a03205cfe03751481ebb4b3300c126a"
-  integrity sha1-E+v+d4oDIFz+A3UUgeu0szAMEmo=
-  dependencies:
-    inherits "~2.0.0"
-
 bluebird@3.7.2, bluebird@^3.3.5, bluebird@^3.5.5, bluebird@^3.7.2:
  version "3.7.2"
  resolved "https://registry.npmjs.org/bluebird/-/bluebird-3.7.2.tgz#9f229c15be272454ffa973ace0dbee79a1b0c36f"
@@ -10263,7 +10263,7 @@ detect-indent@^6.0.0:
  resolved "https://registry.npmjs.org/detect-indent/-/detect-indent-6.0.0.tgz#0abd0f549f69fc6659a254fe96786186b6f528fd"
  integrity sha512-oSyFlqaTHCItVRGK5RmrmjB+CmaMOW7IaNA/kdxqhoa6d17j/5ce9O9eWXmV/KEdRwqpQA+Vqe8a8Bsybu4YnA==

-detect-libc@^1.0.2, detect-libc@^1.0.3:
+detect-libc@^1.0.3:
  version "1.0.3"
  resolved "https://registry.npmjs.org/detect-libc/-/detect-libc-1.0.3.tgz#fa137c4bd698edf55cd5cd02ac559f91a4c4ba9b"
  integrity sha1-+hN8S9aY7fVc1c0CrFWfkaTEups=
@@ -12354,7 +12354,7 @@ fsevents@^2.1.2, fsevents@~2.3.2:
  resolved "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz#8a526f78b8fdf4623b709e0b975c52c24c02fd1a"
  integrity sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==

-fstream@^1.0.0, fstream@^1.0.12:
+fstream@^1.0.12:
  version "1.0.12"
  resolved "https://registry.npmjs.org/fstream/-/fstream-1.0.12.tgz#4e8ba8ee2d48be4f7d0de505455548eae5932045"
  integrity sha512-WvJ193OHa0GHPEL+AycEJgxvBEwyfRkN1vhjca23OaPVMCaLCXTd5qAu82AjTcgP1UJmytkOKb63Ypde7raDIg==
@@ -12623,7 +12623,7 @@ glob@7.1.6:
    once "^1.3.0"
    path-is-absolute "^1.0.0"

-glob@^7.0.0, glob@^7.0.3, glob@^7.1.1, glob@^7.1.2, glob@^7.1.3, glob@^7.1.4, glob@^7.1.6, glob@^7.1.7, glob@^7.2.0:
+glob@^7.0.0, glob@^7.1.1, glob@^7.1.2, glob@^7.1.3, glob@^7.1.4, glob@^7.1.6, glob@^7.1.7, glob@^7.2.0:
  version "7.2.0"
  resolved "https://registry.npmjs.org/glob/-/glob-7.2.0.tgz#d15535af7732e02e948f4c41628bd910293f6023"
  integrity sha512-lmLf6gtyrPq8tTjSmrO94wBeQbFR3HbLHbuyD69wuyQkImp2hWqMGB47OX65FBkPffO641IP9jWa1z4ivqG26Q==
@@ -13481,7 +13481,7 @@ hyphenate-style-name@^1.0.2, hyphenate-style-name@^1.0.3:
  resolved "https://registry.npmjs.org/hyphenate-style-name/-/hyphenate-style-name-1.0.3.tgz#097bb7fa0b8f1a9cf0bd5c734cf95899981a9b48"
  integrity sha512-EcuixamT82oplpoJ2XU4pDtKGWQ7b00CD9f1ug9IaQ3p1bkHMiKCZ9ut9QDI6qsa6cpUuB+A/I+zLtdNK4n2DQ==

-iconv-lite@0.4.24, iconv-lite@^0.4.24, iconv-lite@^0.4.4:
+iconv-lite@0.4.24, iconv-lite@^0.4.24:
  version "0.4.24"
  resolved "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz#2022b4b25fbddc21d2f524974a474aafe733908b"
  integrity sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==
@@ -13527,7 +13527,7 @@ ignore-by-default@^1.0.1:
  resolved "https://registry.npmjs.org/ignore-by-default/-/ignore-by-default-1.0.1.tgz#48ca6d72f6c6a3af00a9ad4ae6876be3889e2b09"
  integrity sha1-SMptcvbGo68Aqa1K5odr44ieKwk=

-ignore-walk@^3.0.1, ignore-walk@^3.0.3:
+ignore-walk@^3.0.3:
  version "3.0.3"
  resolved "https://registry.npmjs.org/ignore-walk/-/ignore-walk-3.0.3.tgz#017e2447184bfeade7c238e4aefdd1e8f95b1e37"
  integrity sha512-m7o6xuOaT1aqheYHKf8W6J5pYH85ZI9w077erOzLje3JsB1gkafkAhHHY19dqjulgIZHFm32Cp5uNZgcQqdJKw==
@@ -17356,7 +17356,7 @@ mkdirp-infer-owner@^2.0.0:
    infer-owner "^1.0.4"
    mkdirp "^1.0.3"

-"mkdirp@>=0.5 0", mkdirp@^0.5.0, mkdirp@^0.5.1, mkdirp@^0.5.4, mkdirp@^0.5.5, mkdirp@~0.5.1:
+"mkdirp@>=0.5 0", mkdirp@^0.5.1, mkdirp@^0.5.4, mkdirp@^0.5.5, mkdirp@~0.5.1:
  version "0.5.5"
  resolved "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.5.tgz#d91cefd62d1436ca0f41620e251288d420099def"
  integrity sha512-NKmAlESf6jMGym1++R0Ra7wvhV+wFW63FaSOFPwRahvea0gMUcGUhVeAg/0BC0wiv9ih5NYPB1Wn1UEI1/L+xQ==
@@ -17593,15 +17593,6 @@ natural-compare@^1.4.0:
  resolved "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz#4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7"
  integrity sha1-Sr6/7tdUHywnrPspvbvRXI1bpPc=

-needle@^2.2.1:
-  version "2.6.0"
-  resolved "https://registry.npmjs.org/needle/-/needle-2.6.0.tgz#24dbb55f2509e2324b4a99d61f413982013ccdbe"
-  integrity sha512-KKYdza4heMsEfSWD7VPUIz3zX2XDwOyX2d+geb4vrERZMT5RMU6ujjaD+I5Yr54uZxQ2w6XRTAhHBbSCyovZBg==
-  dependencies:
-    debug "^3.2.6"
-    iconv-lite "^0.4.4"
-    sax "^1.2.4"
-
 negotiator@0.6.2, negotiator@^0.6.2:
  version "0.6.2"
  resolved "https://registry.npmjs.org/negotiator/-/negotiator-0.6.2.tgz#feacf7ccf525a77ae9634436a64883ffeca346fb"
@@ -17651,10 +17642,10 @@ node-abort-controller@^3.0.1:
  resolved "https://registry.npmjs.org/node-abort-controller/-/node-abort-controller-3.0.1.tgz#f91fa50b1dee3f909afabb7e261b1e1d6b0cb74e"
  integrity sha512-/ujIVxthRs+7q6hsdjHMaj8hRG9NuWmwrz+JdRwZ14jdFoKSkm+vDsCbF9PLpnSqjaWQJuTmVtcWHNLr+vrOFw==

-node-addon-api@^3.0.0:
-  version "3.2.1"
-  resolved "https://registry.npmjs.org/node-addon-api/-/node-addon-api-3.2.1.tgz#81325e0a2117789c0128dab65e7e38f07ceba161"
-  integrity sha512-mmcei9JghVNDYydghQmeDX8KoAm0FAiYyIcUt/N4nhyAipB17pllZQDOJD2fotxABnt4Mdz+dKTO7eftLg4d0A==
+node-addon-api@^4.2.0:
+  version "4.3.0"
+  resolved "https://registry.npmjs.org/node-addon-api/-/node-addon-api-4.3.0.tgz#52a1a0b475193e0928e98e0426a0d1254782b77f"
+  integrity sha512-73sE9+3UaLYYFmDsFZnqCInzPyh3MqIwZO9cw58yIqAZhONrrabrYyYe3TuIqtIiOuTXVhsGau8hcrhhwSsDIQ==

 node-cache@^5.1.2:
  version "5.1.2"
@@ -17711,24 +17702,6 @@ node-forge@^1.2.0:
  resolved "https://registry.npmjs.org/node-forge/-/node-forge-1.2.1.tgz#82794919071ef2eb5c509293325cec8afd0fd53c"
  integrity sha512-Fcvtbb+zBcZXbTTVwqGA5W+MKBj56UjVRevvchv5XrcyXbmNdesfZL37nlcWOfpgHhgmxApw3tQbTr4CqNmX4w==

-node-gyp@3.x:
-  version "3.8.0"
-  resolved "https://registry.npmjs.org/node-gyp/-/node-gyp-3.8.0.tgz#540304261c330e80d0d5edce253a68cb3964218c"
-  integrity sha512-3g8lYefrRRzvGeSowdJKAKyks8oUpLEd/DyPV4eMhVlhJ0aNaZqIrNUIPuEWWTAoPqyFkfGrM67MC69baqn6vA==
-  dependencies:
-    fstream "^1.0.0"
-    glob "^7.0.3"
-    graceful-fs "^4.1.2"
-    mkdirp "^0.5.0"
-    nopt "2 || 3"
-    npmlog "0 || 1 || 2 || 3 || 4"
-    osenv "0"
-    request "^2.87.0"
-    rimraf "2"
-    semver "~5.3.0"
-    tar "^2.0.0"
-    which "1"
-
 node-gyp@^5.0.2:
  version "5.1.0"
  resolved "https://registry.npmjs.org/node-gyp/-/node-gyp-5.1.0.tgz#8e31260a7af4a2e2f994b0673d4e0b3866156332"
@@ -17818,22 +17791,6 @@ node-notifier@^8.0.0:
    uuid "^8.3.0"
    which "^2.0.2"

-node-pre-gyp@^0.11.0:
-  version "0.11.0"
-  resolved "https://registry.npmjs.org/node-pre-gyp/-/node-pre-gyp-0.11.0.tgz#db1f33215272f692cd38f03238e3e9b47c5dd054"
-  integrity sha512-TwWAOZb0j7e9eGaf9esRx3ZcLaE5tQ2lvYy1pb5IAaG1a2e2Kv5Lms1Y4hpj+ciXJRofIxxlt5haeQ/2ANeE0Q==
-  dependencies:
-    detect-libc "^1.0.2"
-    mkdirp "^0.5.1"
-    needle "^2.2.1"
-    nopt "^4.0.1"
-    npm-packlist "^1.1.6"
-    npmlog "^4.0.2"
-    rc "^1.2.7"
-    rimraf "^2.6.1"
-    semver "^5.3.0"
-    tar "^4"
-
 node-releases@^2.0.1:
  version "2.0.1"
  resolved "https://registry.npmjs.org/node-releases/-/node-releases-2.0.1.tgz#3d1d395f204f1f2f29a54358b9fb678765ad2fc5"
@@ -17855,13 +17812,6 @@ nodemon@^2.0.2:
    undefsafe "^2.0.3"
    update-notifier "^4.1.0"

-"nopt@2 || 3":
-  version "3.0.6"
-  resolved "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz#c6465dbf08abcd4db359317f79ac68a646b28ff9"
-  integrity sha1-xkZdvwirzU2zWTF/eaxopkayj/k=
-  dependencies:
-    abbrev "1"
-
 nopt@^4.0.1:
  version "4.0.3"
  resolved "https://registry.npmjs.org/nopt/-/nopt-4.0.3.tgz#a375cad9d02fd921278d954c2254d5aa57e15e48"
@@ -17931,7 +17881,7 @@ normalize-url@^6.0.1:
  resolved "https://registry.npmjs.org/normalize-url/-/normalize-url-6.1.0.tgz#40d0885b535deffe3f3147bec877d05fe4c5668a"
  integrity sha512-DlL+XwOy3NxAQ8xuC0okPgK46iuVNAK01YN7RueYBqqFeGsBjV9XmCAzAdgt+667bCl5kPh9EqKKDwnaPG1I7A==

-npm-bundled@^1.0.1, npm-bundled@^1.1.1:
+npm-bundled@^1.1.1:
  version "1.1.1"
  resolved "https://registry.npmjs.org/npm-bundled/-/npm-bundled-1.1.1.tgz#1edd570865a94cdb1bc8220775e29466c9fb234b"
  integrity sha512-gqkfgGePhTpAEgUsGEgcq1rqPXA+tv/aVBlgEzfXwA1yiUJF7xtEt3CtVwOjNYQOVknDk0F20w58Fnm3EtG0fA==
@@ -17982,15 +17932,6 @@ npm-package-arg@^8.1.2, npm-package-arg@^8.1.5:
    semver "^7.3.4"
    validate-npm-package-name "^3.0.0"

-npm-packlist@^1.1.6:
-  version "1.4.8"
-  resolved "https://registry.npmjs.org/npm-packlist/-/npm-packlist-1.4.8.tgz#56ee6cc135b9f98ad3d51c1c95da22bbb9b2ef3e"
-  integrity sha512-5+AZgwru5IevF5ZdnFglB5wNlHG1AOOuw28WhUq8/8emhBmLv6jX5by4WJCh7lW0uSYZYS6DXqIsyZVIXRZU9A==
-  dependencies:
-    ignore-walk "^3.0.1"
-    npm-bundled "^1.0.1"
-    npm-normalize-package-bin "^1.0.1"
-
 npm-packlist@^2.1.4:
  version "2.1.4"
  resolved "https://registry.npmjs.org/npm-packlist/-/npm-packlist-2.1.4.tgz#40e96b2b43787d0546a574542d01e066640d09da"
@@ -18060,7 +18001,7 @@ npm-run-path@^4.0.0, npm-run-path@^4.0.1:
  dependencies:
    path-key "^3.0.0"

-"npmlog@0 || 1 || 2 || 3 || 4", npmlog@^4.0.2, npmlog@^4.1.2:
+npmlog@^4.1.2:
  version "4.1.2"
  resolved "https://registry.npmjs.org/npmlog/-/npmlog-4.1.2.tgz#08a7f2a8bf734604779a9efa4ad5cc717abb954b"
  integrity sha512-2uUqazuKlTaSI/dC8AzicUck7+IrEaOnN/e0jd3Xtt1KcGpwx30v50mL7oPyr/h9bL3E4aZccVwpwP+5W9Vjkg==
@@ -18394,7 +18335,7 @@ os-tmpdir@^1.0.0, os-tmpdir@~1.0.2:
  resolved "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz#bbe67406c79aa85c5cfec766fe5734555dfa1274"
  integrity sha1-u+Z0BseaqFxc/sdm/lc0VV36EnQ=

-osenv@0, osenv@^0.1.4:
+osenv@^0.1.4:
  version "0.1.5"
  resolved "https://registry.npmjs.org/osenv/-/osenv-0.1.5.tgz#85cdfafaeb28e8677f416e287592b5f3f49ea410"
  integrity sha512-0CWcCECdMVc2Rw3U5w9ZjqX6ga6ubk1xDVKxtBQPK7wis/0F2r9T6k4ydGYhecl7YUBxBVxhL5oisPsNxAPe2g==
@@ -20058,7 +19999,7 @@ rc-util@^5.16.1:
    react-is "^16.12.0"
    shallowequal "^1.1.0"

-rc@^1.2.7, rc@^1.2.8:
+rc@^1.2.8:
  version "1.2.8"
  resolved "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz#cd924bf5200a075b83c188cd6b9e211b7fc0d3ed"
  integrity sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==
@@ -20982,7 +20923,7 @@ request-promise-native@^1.0.8:
    stealthy-require "^1.1.1"
    tough-cookie "^2.3.3"

-request@^2.87.0, request@^2.88.0, request@^2.88.2:
+request@^2.88.0, request@^2.88.2:
  version "2.88.2"
  resolved "https://registry.npmjs.org/request/-/request-2.88.2.tgz#d73c918731cb5a87da047e207234146f664d12b3"
  integrity sha512-MsvtOrfG9ZcrOwAW+Qi+F6HbD0CWXEh9ou77uOb7FM2WPhwT7smM833PzanhJLsgXjN89Ir6V2PczXNnMpwKhw==
@@ -21192,7 +21133,7 @@ rifm@^0.7.0:
  dependencies:
    "@babel/runtime" "^7.3.1"

-rimraf@2, rimraf@^2.6.1, rimraf@^2.6.3:
+rimraf@2, rimraf@^2.6.3:
  version "2.7.1"
  resolved "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz#35797f13a7fdadc566142c29d4f07ccad483e3ec"
  integrity sha512-uWjbaKIK3T1OSVptzX7Nl6PvQ3qAGtKEtVRjRuazjfL3Bx5eI409VZSqgND+4UNnmzLVdPj9FqFJNPqBZFve4w==
@@ -21399,7 +21340,7 @@ sax@1.2.1:
  resolved "https://registry.npmjs.org/sax/-/sax-1.2.1.tgz#7b8e656190b228e81a66aea748480d828cd2d37a"
  integrity sha1-e45lYZCyKOgaZq6nSEgNgozS03o=

-sax@>=0.6.0, sax@^1.2.4, sax@~1.2.4:
+sax@>=0.6.0, sax@~1.2.4:
  version "1.2.4"
  resolved "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz#2816234e2378bddc4e5354fab5caa895df7100d9"
  integrity sha512-NqVDv9TpANUjFm0N8uM5GxL36UgKi9/atZw+x7YFnQ8ckwFGKrl4xX4yWtrey3UJm5nP1kUbnYgLopqWNSRhWw==
@@ -21506,7 +21447,7 @@ semver-store@^0.3.0:
  resolved "https://registry.npmjs.org/semver-store/-/semver-store-0.3.0.tgz#ce602ff07df37080ec9f4fb40b29576547befbe9"
  integrity sha512-TcZvGMMy9vodEFSse30lWinkj+JgOBvPn8wRItpQRSayhc+4ssDs335uklkfvQQJgL/WvmHLVj4Ycv2s7QCQMg==

-"semver@2 || 3 || 4 || 5", semver@^5.3.0, semver@^5.4.1, semver@^5.5.0, semver@^5.6.0, semver@^5.7.1:
+"semver@2 || 3 || 4 || 5", semver@^5.4.1, semver@^5.5.0, semver@^5.6.0, semver@^5.7.1:
  version "5.7.1"
  resolved "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz#a954f931aeba508d307bbf069eff0c01c96116f7"
  integrity sha512-sauaDf/PZdVgrLTNYHRtpXa1iRiKcaebiKQ1BJdpQlWH2lCvexQdX55snPFyK7QzpudqbCI0qXFfOasHdyNDGQ==
@@ -21528,11 +21469,6 @@ semver@^7.0.0, semver@^7.1.1, semver@^7.1.3, semver@^7.3.2, semver@^7.3.4, semve
  dependencies:
    lru-cache "^6.0.0"

-semver@~5.3.0:
-  version "5.3.0"
-  resolved "https://registry.npmjs.org/semver/-/semver-5.3.0.tgz#9b2ce5d3de02d17c6012ad326aa6b4d0cf54f94f"
-  integrity sha1-myzl094C0XxgEq0yaqa00M9U+U8=
-
 send@0.17.2:
  version "0.17.2"
  resolved "https://registry.npmjs.org/send/-/send-0.17.2.tgz#926622f76601c41808012c8bf1688fe3906f7820"
@@ -22152,16 +22088,6 @@ sprintf-js@~1.0.2:
  resolved "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz#04e6926f662895354f3dd015203633b857297e2c"
  integrity sha1-BOaSb2YolTVPPdAVIDYzuFcpfiw=

-sqlite3@^5.0.1:
-  version "5.0.2"
-  resolved "https://registry.npmjs.org/sqlite3/-/sqlite3-5.0.2.tgz#00924adcc001c17686e0a6643b6cbbc2d3965083"
-  integrity sha512-1SdTNo+BVU211Xj1csWa8lV6KM0CtucDwRyA0VHl91wEH1Mgh7RxUpI4rVvG7OhHrzCSGaVyW5g8vKvlrk9DJA==
-  dependencies:
-    node-addon-api "^3.0.0"
-    node-pre-gyp "^0.11.0"
-  optionalDependencies:
-    node-gyp "3.x"
-
 sqlstring@^2.3.2:
  version "2.3.2"
  resolved "https://registry.npmjs.org/sqlstring/-/sqlstring-2.3.2.tgz#cdae7169389a1375b18e885f2e60b3e460809514"
@@ -22904,16 +22830,7 @@ tar-stream@^2.0.0, tar-stream@^2.1.4, tar-stream@^2.2.0:
    inherits "^2.0.3"
    readable-stream "^3.1.1"

-tar@^2.0.0:
-  version "2.2.2"
-  resolved "https://registry.npmjs.org/tar/-/tar-2.2.2.tgz#0ca8848562c7299b8b446ff6a4d60cdbb23edc40"
-  integrity sha512-FCEhQ/4rE1zYv9rYXJw/msRqsnmlje5jHP6huWeBZ704jUTy02c5AZyWujpMR1ax6mVw9NyJMfuK2CMDWVIfgA==
-  dependencies:
-    block-stream "*"
-    fstream "^1.0.12"
-    inherits "2"
-
-tar@^4, tar@^4.4.12:
+tar@^4.4.12:
  version "4.4.19"
  resolved "https://registry.npmjs.org/tar/-/tar-4.4.19.tgz#2e4d7263df26f2b914dee10c825ab132123742f3"
  integrity sha512-a20gEsvHnWe0ygBY8JbxoM4w3SJdhc7ZAuxkLqh+nvNQN2IOt0B5lLgM490X5Hl8FF0dl0tOf2ewFYAlIFgzVA==
@@ -24585,7 +24502,7 @@ which-typed-array@^1.1.2:
    has-symbols "^1.0.1"
    is-typed-array "^1.1.3"

-which@1, which@^1.2.9, which@^1.3.1:
+which@^1.2.9, which@^1.3.1:
  version "1.3.1"
  resolved "https://registry.npmjs.org/which/-/which-1.3.1.tgz#a45043d54f5805316da8d62f9f50918d3da70b0a"
  integrity sha512-HxJdYWq1MTIQbJ3nw0cqssHoTNU267KlrDuGZ1WYlxDStUtKUhOaJmh112/TZmHxxUfuJqPXSOm7tDyas0OSIQ==