Just for jpush-async, it make sense, since the version is high originally.
Cause I am not a pro on nodejs, can you please fire a pull request for it

from jpush-api-nodejs-client.

Have you ever tested this?

from jpush-api-nodejs-client.

Yes, all test passed.

[email protected] test /Users/jackywu/Projects/jpush-api-nodejs-client
mocha -t 50000 --reporter spec

(node:64049) [DEP0006] DeprecationWarning: child_process: options.customFds option is deprecated. Use options.stdio instead.

PushPayload test
✓ platform test1
✓ platform test2
✓ platform test3
✓ audience test1
✓ audience test2
✓ audience test2
✓ message test1
✓ message test2
✓ options test1
✓ notification test1
✓ notification test2
✓ notification test3
✓ ios length validate fail test
✓ ios length validate success test
✓ ios length validate fail1 test
✓ ios length validate fail2 test
✓ ios length validate success test

Push test
✓ Alert all test (1008ms)
◦ Push platform test1: got resultwww,tag1,tag2
✓ Push platform test1 (607ms)
✓ Push platform test2 (605ms)
✓ Push tags test (629ms)
✓ Push tags more test (609ms)
◦ Push alias test: got result[object Object]
✓ Push alias test (620ms)
◦ Push alias more test: got result[object Object]
✓ Push alias more test (667ms)
◦ Push tag_and test: got resultasdasdasdtag4,www,tag1,tag2
✓ Push tag_and test (632ms)
✓ Push registration_id test (731ms)
✓ Push registration_id more test (828ms)
✓ Push android (845ms)
✓ Push android full (775ms)
✓ Push message test (611ms)
✓ Push message test2 (578ms)
✓ Push notification and message (575ms)
✓ Options test1 (572ms)
✓ validate test1 (573ms)

34 passing (12s)

from jpush-api-nodejs-client.

After upgrade the version of dependencies, below is the "npm audit" report.

=== npm audit security report ===

Run npm install --save-dev [email protected] to resolve 2 vulnerabilities

SEMVER WARNING: Recommended action is a potentially breaking change
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High │ Regular Expression Denial of Service │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ minimatch │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ mocha [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ mocha > glob > minimatch │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://nodesecurity.io/advisories/118 │
└───────────────┴──────────────────────────────────────────────────────────────┘

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Critical │ Command Injection │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ growl │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ mocha [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ mocha > growl │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://nodesecurity.io/advisories/146 │
└───────────────┴──────────────────────────────────────────────────────────────┘

found 2 vulnerabilities (1 high, 1 critical) in 575 scanned packages
2 vulnerabilities require semver-major dependency updates.

So still there are two vulnerabilities, but these are dev dependency, I will leave it for your decision whether to fix it.

from jpush-api-nodejs-client.

thank you for your hard working

from jpush-api-nodejs-client.