Advisories for Npm/Seria-Number package

giting allows execution of arbritary commands. The first argument "repo" of function "pull()" is executed by the package without any validation.