mozilla / node-convict / 726

93%

push

travis-ci

Use `^x.y.z` range versions for deps

Ease relying applications security fixes by using `^x.y.z` range
versions for Convict's `dependencies` and `devDependencies`, instead of
exact/strict versions.  Nowadays all applications should lock their
`dependencies` and `devDependencies` using lock files such as
`package-lock.json`.  There is also tools such as `npm audit fix` that
very easily and effectively fix vulnerabilites in version ranges. So,
from now on, Convict will not put itself in the way, by leveraging
Semantic Versioning to its maximum for `dependencies` and
`devDependencies`.

221 of 223 branches covered (99.1%)

347 of 347 relevant lines covered (100.0%)

230.19 hits per line