[Snyk] Security upgrade pkg from 4.4.9 to 5.0.0

[MrTalon63]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	644/1000 Why? Has a fix available, CVSS 8.6	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Poisoning SNYK-JS-QS-3153490	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: pkg

The new version differs by 50 commits.

• ee8808a 5.0.0
• 08b26a4 Bump to vercel/pkg-fetch@v3.0.3 (#1142)
• 211da6e Bump to vercel/pkg-fetch@v3.0.2
• 779adf8 Fix isPublic check for licenses array (#1140)
• 63f4ce0 test: add "node14" to fetch-all
• 6ecd52a Drop references to Node < 8
• 247d1d5 Fix "pkg-fetch" types
• bba8148 Don't mix objects of different types
• 5a97ee2 Cleanup dependencies
• 14fb420 Bump to vercel/pkg-fetch@v3.0.1
• 8756fc1 Support mkdir at mountpoints (#1120)
• 94cdb69 test: add unit test for #775 (#1118)
• 3507e2c Skip pnpm tests when nodeversion is < 12 (#1122)
• 6deb812 TypeScript Rewrite (#1099)
• b7426da Remove coverage badge from README. (#1114)
• d3b9585 Extend ESLint to test files. (#1107)
• bbb20b2 Update License Zeit -> Vercel. (#1113)
• eb8921a Add support for symlink and pnpm. (#1060)
• 79cca54 feat(parser): handle template literal without expressions (#981)
• 2c1fa89 typo fix in readme (#1108)
• d9dc558 Add section about bytecode flag to README.md (#1106)
• c9ad6ff Add Windows builds on CI. (#1105)
• 11b93bf Update all dependencies to latest. (#1062)
• cceb78a Update release script. (#1102)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution