An HTML resume styled with Tailwind.css based on Universal Resume

  • By Thomas Leon Highbaugh
  • Last update: Dec 24, 2022
  • Comments: 14

Universal Résumé Template

Inspiration

This was inspired by, and parts adapted from, WebPraktikos' universal resume template, which tries harder to be supported across use cases so in case you need A4 sizing or anything else like that, I would check out his repo.

Right to Copy or Adapt to Your Needs

This is my personal resume, written out using universal resume template as a guide but constitutes a distinct work product from the original and is composed using styles and font-families that constitute my personal branding, so please change at least that much if you opt to adapt it yourself, other than that, have fun and good luck with finding your next job.


How to run it

Clone the git repository

git clone https://github.com/Thomashighbaugh/resume

Navigate to the base directory:

cd resume

Install the dependencies:

yarn install

Start the development server after building the stylesheet out of the Tailwind configuration:

yarn build && yarn serve

Only generate CSS that is used on the page which results in a much smaller file size:

yarn build

Starting Point

docs/index.html is the main content file. By copying HTML: add pages, sections, subsection, and other parts.

npm run build enables drag and drop support of the docs directory, which you find helpful unloading your copy on GitHub if terminal/command prompt is not your thing.


Tailwind CSS

A nice bootstrap alternative that doesn't have as much opinionation that is all the rage these days with the 'hates css' crowd that while not a part of, I definitely didn't want to fall behind and thus I took this oppurtunity to practice a bit.


Custom CSS

Code from tailwind.config.js and tailwind.css transpiles to docs/style.css.


Balanced Columns

Removing col-fill-auto class will make both columns equally tall. Moreover, removing md:h-letter and md:h-letter-col classes will eliminate fixed proportions of the letter or A4 page — thereby removing unnecessary vertical space when displaying short columns.


Printing

Chrome

Right-click → Print.
Also, choose the Save as PDF option if needed.

Firefox

File → Print.

Adobe Acrobat Reader

File → Print.

By clicking on the Page Setup button, you are taken to the window with A4 and Letter options.

Github

https://github.com/Thomashighbaugh/resume

Comments(14)

  • 1

    [Snyk] Upgrade cssnano from 4.1.10 to 4.1.11

    Snyk has created this PR to upgrade cssnano from 4.1.10 to 4.1.11.

    :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


    • The recommended version is 1 version ahead of your current version.
    • The recommended version was released 3 months ago, on 2021-04-06.
    Release notes
    Package name: cssnano
    • 4.1.11 - 2021-04-06
    • 4.1.10 - 2019-02-14
    from cssnano GitHub release notes

    Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

    For more information:

    🧐 View latest project report

    🛠 Adjust upgrade PR settings

    🔕 Ignore this dependency or unsubscribe from future upgrade PRs

  • 2

    [Snyk] Upgrade @fullhuman/postcss-purgecss from 4.0.0 to 4.0.3

    Snyk has created this PR to upgrade @fullhuman/postcss-purgecss from 4.0.0 to 4.0.3.

    merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


    • The recommended version is 3 versions ahead of your current version.
    • The recommended version was released 4 months ago, on 2021-03-20.
    Release notes
    Package name: @fullhuman/postcss-purgecss from @fullhuman/postcss-purgecss GitHub release notes
    Commit messages
    Package name: @fullhuman/postcss-purgecss
    • ff1c558 build: 4.0.3
    • e3dce1a feat: add skippedContentGlobs option to webpack and gulp plugin
    • 2a27663 Add Ability to Ignore Files/Folders (#638)
    • 9b0fdc3 feat: add dynamic attributes option
    • 510f386 build(deps-dev): bump eslint from 7.19.0 to 7.21.0 (#625)
    • 6ca8787 build(deps-dev): bump @ vuepress/theme-default from 1.8.0 to 1.8.2 (#626)
    • df6c920 build(deps): bump webpack from 5.19.0 to 5.24.2 (#627)
    • 8b2989a docs: add vertistudio as sponsor
    • b2ba1a8 docs: change meta description
    • 0fd0fb9 build(deps-dev): bump rollup from 2.38.3 to 2.40.0 (#628)
    • 137080d build(deps-dev): bump lint-staged from 10.5.3 to 10.5.4 (#629)
    • 694a66b build(deps-dev): bump @ typescript-eslint/eslint-plugin (#630)
    • 5d03bba build(deps-dev): bump @ vuepress/plugin-google-analytics (#624)
    • 301551b build(deps-dev): bump ts-jest from 26.5.0 to 26.5.2 (#623)
    • 369aa1d build(deps-dev): bump @ types/node from 14.14.22 to 14.14.31 (#622)
    • d05d119 build: 4.0.2
    • 61a9f53 build: 4.0.1
    • 163f1a5 docs: add rollup-plugin-purgecss to the list of packages
    • 19405d2 build: update vue-cli to use purgecss 4.0
    • 5b029c2 fix: webpack plugin option blocklist types
    • 296c91f Update issue templates
    • 0148cea feat: add option blocklist to webpack plugin (#610)
    • 824e208 refactor(rollup-plugin-purgecss): remove unused files
    • d0235a6 wip(rollup-plugin-purgecss): convert to typescript

    Compare


    Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

    For more information:

    🧐 View latest project report

    🛠 Adjust upgrade PR settings

    🔕 Ignore this dependency or unsubscribe from future upgrade PRs

  • 3

    [Snyk] Upgrade postcss from 8.2.4 to 8.3.4

    Snyk has created this PR to upgrade postcss from 8.2.4 to 8.3.4.

    merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


    • The recommended version is 16 versions ahead of your current version.
    • The recommended version was released 23 days ago, on 2021-06-14.
    Release notes
    Package name: postcss
    • 8.3.4 - 2021-06-14
      • Fixed broken AST detection.
    • 8.3.3 - 2021-06-14
      • Fixed broken AST on postcss dependency duplication in custom parsers.
    • 8.3.2 - 2021-06-11
      • Update changelog.
    • 8.3.1 - 2021-06-09
      • Fixed false positives PostCSS does nothing warning on syntax option.
    • 8.3.0 - 2021-05-21

      Duke Murmur seal

      PostCSS 8.3 improved source map parsing performance, added Node#assign() shortcut, and experimental Document node to AST.

      Thanks to Sponsors

      This release was possible thanks to our community.

      Sponsored by Tailwind CSS Sponsored by ThemeIsle

      If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

      Source Map Performance

      Because PostCSS needs synchronous API, we can’t move from the old `source-map 0.6 to 0.7 (many other open-source projects too).

      @ 7rulnik forked source-map 0.6 to source-map-js and back-ported performance improvements from 0.7. In 8.3 we switched from source-map to this source-map-js fork.

      You map see 4x performance improvements in parsing map from processing step before PostCSS (for instance, Sass).

      Document Nodes

      Thanks to @ gucong3000, PostCSS already parse CSS from HTML and JS files (CSS-in-JS templates and objects).

      But his plugin need big updates. @ hudochenkov from stylelint team decided to create new parsers for styles inside CSS-in-JS, HTML, and Markdown.

      He suggested adding new Document node type to PostCSS AST to keep multiple Root nodes inside and JS/HTML/Markdown code blocks between these style blocks.

      const document = htmlParser(
        '<html><style>a{color:black}</style><style>b{z-index:2}</style>'
      )
      document.type          //=> 'document'
      document.nodes.length  //=> 2
      document.nodes[0].type //=> 'root'

      This is an experimental feature. Some aspects of this node could change within minor or patch version releases.

      Node#assign() Shortcut

      The creator of famous postcss-preset-env and many other PostCSS tools, @ jonathantneal suggested a nice shortcut to change multiple properties in the node:

      decl.assign({ prop: 'word-wrap', value: 'break-word' })
    • 8.2.15 - 2021-05-10
      • Fixed list type definitions (by @ n19htz).
    • 8.2.14 - 2021-05-05
      • Removed source-map from client-side bundle (by @ barak007).
    • 8.2.13 - 2021-04-26
      • Fixed ReDoS vulnerabilities in source map parsing (by @ yetingli).
    • 8.2.12 - 2021-04-22
    • 8.2.11 - 2021-04-22
    • 8.2.10 - 2021-04-11
    • 8.2.9 - 2021-03-30
    • 8.2.8 - 2021-03-09
    • 8.2.7 - 2021-03-03
    • 8.2.6 - 2021-02-10
    • 8.2.5 - 2021-02-06
    • 8.2.4 - 2021-01-09
    from postcss GitHub release notes

    Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

    For more information:

    🧐 View latest project report

    🛠 Adjust upgrade PR settings

    🔕 Ignore this dependency or unsubscribe from future upgrade PRs

  • 4

    Depfu Error: No dependency files found

    Hello,

    We've tried to activate or update your repository on Depfu and couldn't find any supported dependency files. If we were to guess, we would say that this is not actually a project Depfu supports and has probably been activated by error.

    Monorepos

    Please note that Depfu currently only searches for your dependency files in the root folder. We do support monorepos and non-root files, but don't auto-detect them. If that's the case with this repo, please send us a quick email with the folder you want Depfu to work on and we'll set it up right away!

    How to deactivate the project

    • Go to the Settings page of either your own account or the organization you've used
    • Go to "Installed Integrations"
    • Click the "Configure" button on the Depfu integration
    • Remove this repo (Thomashighbaugh/resume) from the list of accessible repos.

    Please note that using the "All Repositories" setting doesn't make a lot of sense with Depfu.

    If you think that this is a mistake

    Please let us know by sending an email to [email protected].


    This is an automated issue by Depfu. You're getting it because someone configured Depfu to automatically update dependencies on this project.

  • 5

    Update dependency autoprefixer to v10.2.4

    WhiteSource Renovate

    This PR contains the following updates:

    | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | autoprefixer | 10.2.3 -> 10.2.4 | age | adoption | passing | confidence |


    Release Notes

    postcss/autoprefixer

    v10.2.4

    Compare Source

    • Fixed browser names in npx autoprefixer --info.

    Renovate configuration

    :date: Schedule: At any time (no schedule defined).

    :vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

    :recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

    :no_bell: Ignore: Close this PR and you won't be reminded about this update again.


    • [ ] If you want to rebase/retry this PR, check this box

    This PR has been generated by WhiteSource Renovate. View repository job log here.

  • 6

    Pin dependency postcss to 8.2.4

    WhiteSource Renovate

    This PR contains the following updates:

    | Package | Type | Update | Change | |---|---|---|---| | postcss (source) | dependencies | pin | ^8.2.4 -> 8.2.4 |

    :pushpin: Important: Renovate will wait until you have merged this Pin PR before creating any upgrade PRs for the affected packages. Add the preset :preserveSemverRanges to your config if you instead don't wish to pin dependencies.


    Renovate configuration

    :date: Schedule: At any time (no schedule defined).

    :vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

    :recycle: Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

    :ghost: Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


    • [ ] If you want to rebase/retry this PR, check this box

    This PR has been generated by WhiteSource Renovate. View repository job log here.

  • 7

    Pin dependency postcss to 8.2.4

    WhiteSource Renovate

    This PR contains the following updates:

    | Package | Type | Update | Change | |---|---|---|---| | postcss (source) | dependencies | pin | ^8.2.4 -> 8.2.4 |

    :pushpin: Important: Renovate will wait until you have merged this Pin PR before creating any upgrade PRs for the affected packages. Add the preset :preserveSemverRanges to your config if you instead don't wish to pin dependencies.


    Renovate configuration

    :date: Schedule: At any time (no schedule defined).

    :vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

    :recycle: Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

    :ghost: Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


    • [ ] If you want to rebase/retry this PR, check this box

    This PR has been generated by WhiteSource Renovate. View repository job log here.

  • 8

    Update dependency tailwindcss to v2

    WhiteSource Renovate

    This PR contains the following updates:

    | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | tailwindcss (source) | 1.9.6 -> 2.0.2 | age | adoption | passing | confidence |


    Release Notes

    tailwindlabs/tailwindcss

    v2.0.2

    Compare Source

    Fixed
    • Fix issue with @apply not working as expected with !important inside an atrule (#​2824)
    • Fix issue with @apply not working as expected with defined classes (#​2832)
    • Fix memory leak, and broken @apply when splitting up files (#​3032)
    Added
    • Add default values for the ring utility (#​2951)

    v2.0.1

    Compare Source

    • Nothing, just the only thing I could do when I found out npm won't let me publish the same version under two tags.

    v2.0.0

    Compare Source

    Added
    • Add redesigned color palette (#​2623, 700866c, #​2633)
    • Add dark mode support (#​2279, #​2631)
    • Add overflow-ellipsis and overflow-clip utilities (#​1289)
    • Add transform-gpu to force hardware acceleration on transforms when desired (#​1380)
    • Extend default spacing scale (#​2630, 7f05204)
    • Add spacing scale to inset plugin (#​2630)
    • Add percentage sizes to translate, inset, and height plugins (#​2630, 5259560)
    • Extend default font size scale (#​2609, #​2619)
    • Support using @apply with complex classes, including variants like lg:hover:bg-blue-500 (#​2159)
    • Add new 2xl breakpoint at 1536px by default (#​2609)
    • Add default line-height values for font-size utilities (#​2609)
    • Support defining theme values using arrays for CSS properties that support comma separated values (e13f083c4)
    • Enable group-hover for color plugins, boxShadow, and textDecoration by default (28985b6, f6923b1)
    • Enable focus for z-index utilities by default (ae5b3d3)
    • Support extend in variants configuration (#​2651)
    • Add max-w-prose class by default (#​2574)
    • Support flattening deeply nested color objects (#​2148)
    • Support defining presets as functions (#​2680)
    • Support deep merging of objects under extend (#​2679, #​2700)
    • Enable focus-within for all plugins that have focus enabled by default (1a21f072, f6923b1)
    • Added new ring utilities for creating outline/focus rings using box shadows (#​2747, 879f088, e0788ef)
    • Added 5 and 95 to opacity scale (#​2747)
    • Add support for default duration and timing function values whenever enabling transitions (#​2755)
    Changed
    • Completely redesign color palette (#​2623, 700866c, #​2633)
    • Drop support for Node 8 and 10 (#​2582)
    • Removed target feature and dropped any compatibility with IE 11 (#​2571)
    • Upgrade to PostCSS 8 (but include PostCSS 7 compatibility build) (729b400, 1d8679d, c238ed1)
    • Removed shadow-outline, shadow-solid, and shadow-xs by default in favor of new ring API (#​2747)
    • Switch normalize.css to modern-normalize (#​2572)
    • Rename whitespace-no-wrap to whitespace-nowrap (#​2664)
    • Rename flex-no-wrap to flex-nowrap (#​2676)
    • Remove clearfix utility, recommend flow-root instead (#​2766)
    • Disable hover and focus for fontWeight utilities by default (f6923b1)
    • Remove grid-gap fallbacks needed for old versions of Safari (5ec45fa)
    • Change special use of 'default' in config to 'DEFAULT' (#​2580)
    • New @apply implementation, slight backwards incompatibilities with previous behavior (#​2159)
    • Make theme retrieve the expected resolved value when theme value is complex (e13f083c4)
    • Move truncate class to textOverflow core plugin (#​2562)
    • Remove scrolling-touch and scrolling-auto utilities (#​2573)
    • Modernize default system font stacks (#​1711)
    • Upgrade to PurgeCSS 3.0 (8e4e0a0)
    • Change default text-6xl font-size to 3.75rem instead of 4rem (#​2619)
    • Ignore [hidden] elements within space and divide utilities instead of template elements (#​2642)
    • Automatically prefix keyframes and animation names when a prefix is configured (#​2621, #​2641)
    • Merge extend objects deeply by default (#​2679)
    • Respect preserveHtmlElements option even when using custom PurgeCSS extractor (#​2704)
    • Namespace all internal custom properties under tw- to avoid collisions with end-user custom properties (#​2771)

    Renovate configuration

    :date: Schedule: At any time (no schedule defined).

    :vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

    :recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

    :no_bell: Ignore: Close this PR and you won't be reminded about this update again.


    • [ ] If you want to rebase/retry this PR, check this box

    This PR has been generated by WhiteSource Renovate. View repository job log here.

  • 9

    Update dependency postcss-import to v14

    WhiteSource Renovate

    This PR contains the following updates:

    | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | postcss-import | 12.0.1 -> 14.0.0 | age | adoption | passing | confidence |


    Release Notes

    postcss/postcss-import

    v14.0.0

    Compare Source

    This release should not have breaking changes for the vast majority of users; only those with @charset statements in their CSS may be affected.

    • BREAKING: Error if multiple incompatible @charset statements (#​447)
    • BREAKING: Warn if @charset statements are not at the top of files (#​447)
    • Fix handing of @charset (#​436, #​447)

    v13.0.0

    Compare Source

    • BREAKING: Require Node 10+ (#​429)
    • BREAKING: Upgrade to postcss v8 and require it as a peerDependency (#​427, #​432)
    • Update dependencies

    Renovate configuration

    :date: Schedule: At any time (no schedule defined).

    :vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

    :recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

    :no_bell: Ignore: Close this PR and you won't be reminded about this update again.


    • [ ] If you want to rebase/retry this PR, check this box

    This PR has been generated by WhiteSource Renovate. View repository job log here.

  • 10

    Update dependency postcss-cli to v8

    WhiteSource Renovate

    This PR contains the following updates:

    | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | postcss-cli | 7.1.2 -> 8.3.1 | age | adoption | passing | confidence |


    Release Notes

    postcss/postcss-cli

    v8.3.1

    Compare Source

    • Ensure paths are not interpreted as numbers (#​360)
    • Better errors for incorrect postcss version (#​361, #​362)

    v8.3.0

    Compare Source

    v8.2.0

    Compare Source

    • Allow backslashes in paths for better Windows experence (#​355)

    v8.1.0

    Compare Source

    • Add support for postcss.config.cjs files (#​351)

    v8.0.0

    Compare Source


    Renovate configuration

    :date: Schedule: At any time (no schedule defined).

    :vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

    :recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

    :no_bell: Ignore: Close this PR and you won't be reminded about this update again.


    • [ ] If you want to rebase/retry this PR, check this box

    This PR has been generated by WhiteSource Renovate. View repository job log here.

  • 11

    Update dependency autoprefixer to v10

    WhiteSource Renovate

    This PR contains the following updates:

    | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | autoprefixer | 9.8.6 -> 10.2.3 | age | adoption | passing | confidence |


    Release Notes

    postcss/autoprefixer

    v10.2.3

    Compare Source

    • Fixed PostCSS 8 support.

    v10.2.2

    Compare Source

    • Fixed PostCSS 8 plugins compatibility.

    v10.2.1

    Compare Source

    v10.2.0

    Compare Source

    Tudor rose

    Autoprefixer 10.2 now has built-in TypeScript definitions. You do not need @types/autoprefixer anymore.

    Thanks to @​Semigradsky and DefinitelyTyped’s contributors.

    @​Sheraff also improved docs.

    v10.1.0

    Compare Source

    Coat of arms of Botswana

    Autoprefixer 10.1 improved min-resolution support.

    @​infusion added dpcm unit support and num2fraction with Fraction.js, which uses Farey Sequences as a rational approximation (more precise) and simplifies the fraction using continued fractions to ɛ <0.001 afterward.

    /* input */
    @&#8203;media (min-resolution: 113.38dpcm) {
      …
    }
    
    /* output */
    @&#8203;media (-webkit-min-device-pixel-ratio: 3),
           (min--moz-device-pixel-ratio: 3),
           (-o-min-device-pixel-ratio: 3/1),
           (min-resolution: 113.38dpcm) {
      …
    }
    

    v10.0.4

    Compare Source

    • Fixed Cannot read property 'proxyOf' of undefined error (by Igor Kamyshev).

    v10.0.3

    Compare Source

    • Fixed substract to subtract value for mask-composite (by Michelle Enos).

    v10.0.2

    Compare Source

    • Removed -ms-user-select: all because IE and old Edge don’t support it.
    • Fixed Grid Layout warning.

    v10.0.1

    Compare Source

    • Fix PostCSS 8.1 compatability.
    • Add our OpenCollective to package.json.
    • Clean up code (by Sukka).

    v10.0.0

    Compare Source

    Coat of arms of Oregon

    Autoprefixer 10 is based on top of PostCSS 8 (check Known Issues section before updating).

    Node.js 6.x, 8.x, 11.x support was removed.

    Now you need to install Autoprefixer by npm install --save-dev autoprefixer postcss. We moved postcss from dependencies to peerDependencies according to new PostCSS plugin guidelines.


    Renovate configuration

    :date: Schedule: At any time (no schedule defined).

    :vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

    :recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

    :no_bell: Ignore: Close this PR and you won't be reminded about this update again.


    • [ ] If you want to rebase/retry this PR, check this box

    This PR has been generated by WhiteSource Renovate. View repository job log here.

  • 12

    [Snyk] Security upgrade cssnano from 4.1.11 to 5.0.0

    Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

    merge advice

    Changes included in this PR

    • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
      • package.json

    Vulnerabilities that will be fixed

    With an upgrade:

    Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- high severity | 661/1000
    Why? Recently disclosed, Has a fix available, CVSS 7.5 | Regular Expression Denial of Service (ReDoS)
    SNYK-JS-NTHCHECK-1586032 | Yes | No Known Exploit

    (*) Note that the real score may have changed since the PR was raised.

    Check the changes in this PR to ensure they won't cause issues with your project.


    Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

    For more information: 🧐 View latest project report

    🛠 Adjust project settings

    📚 Read more about Snyk's upgrade and patch logic

  • 13

    [Snyk] Security upgrade concurrently from 5.3.0 to 6.0.0

    Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

    Changes included in this PR

    • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
      • package.json

    Vulnerabilities that will be fixed

    With an upgrade:

    Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- high severity | 768/1000
    Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5 | Regular Expression Denial of Service (ReDoS)
    SNYK-JS-ANSIREGEX-1583908 | Yes | Proof of Concept

    (*) Note that the real score may have changed since the PR was raised.

    Commit messages
    Package name: concurrently The new version differs by 9 commits.
    • 343d1ab 6.0.0
    • 986bc3d Add cwd option to programmatic API (#246)
    • 6fcbf19 Support for hex colors in prefixColor (#261)
    • 2e1ad01 Upgrade all packages to drop support for Node 8
    • e17f693 Bump minimum Node.js version to 10
    • b62a2a1 npm: update some packages through major versions
    • 7700363 npm: update some packages
    • 81aa338 npm: upgrade yargs, jest and eslint, drop Node 6 support (#244)
    • 7f1bd27 build(deps): bump yargs-parser from 13.1.1 to 13.1.2 (#243)

    See the full diff

    Check the changes in this PR to ensure they won't cause issues with your project.


    Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

    For more information: 🧐 View latest project report

    🛠 Adjust project settings

    📚 Read more about Snyk's upgrade and patch logic

  • 14

    [Snyk] Security upgrade postcss from 8.2.4 to 8.2.13

    Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

    merge advice

    Changes included in this PR

    • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
      • package.json

    Vulnerabilities that will be fixed

    With an upgrade:

    Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- medium severity | 479/1000
    Why? Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
    SNYK-JS-POSTCSS-1090595 | No | No Known Exploit medium severity | 479/1000
    Why? Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
    SNYK-JS-POSTCSS-1255640 | No | No Known Exploit

    (*) Note that the real score may have changed since the PR was raised.

    Check the changes in this PR to ensure they won't cause issues with your project.


    Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

    For more information: 🧐 View latest project report

    🛠 Adjust project settings

    📚 Read more about Snyk's upgrade and patch logic