Replace mkdirp to fs.mkdir with recursive option

karma.conf.js

@@ -2,8 +2,8 @@
 
 const fs = require('fs');
 const path = require('path');
-const mkdirp = require('mkdirp');
 const os = require('os');
+const utils = require('./lib/utils');
 const baseBundleDirpath = path.join(__dirname, '.karma');
 
 const hostname = os.hostname();
@@ -111,7 +111,7 @@ module.exports = config => {
         console.error('No SauceLabs credentials present');
       }
     }
-    mkdirp.sync(bundleDirpath);
+    utils.mkdir(bundleDirpath);
   } else {
     console.error('CI mode disabled');
   }

lib/cli/init.js

@@ -9,7 +9,7 @@
 
 const fs = require('fs');
 const path = require('path');
-const mkdirp = require('mkdirp');
+const utils = require('../utils');
 
 exports.command = 'init <path>';
 
@@ -24,7 +24,7 @@ exports.builder = yargs =>
 exports.handler = argv => {
   const destdir = argv.path;
   const srcdir = path.join(__dirname, '..', '..');
-  mkdirp.sync(destdir);
+  utils.mkdir(destdir);
   const css = fs.readFileSync(path.join(srcdir, 'mocha.css'));
   const js = fs.readFileSync(path.join(srcdir, 'mocha.js'));
   const tmpl = fs.readFileSync(

lib/utils.js

@@ -853,3 +853,20 @@ exports.supportsEsModules = function() {
     }
   }
 };
+
+/**
+ * Recursively mkdir, like `mkdirp`
+ *
+ * @description
+ * This function is to create a new directory and any necessary subdirectories at the directory.
+ * `fs.mkdir` with {recursive: true} can be a replacement for vulnerable `mkdirp`.
+ *
+ * @private
+ * @param {string} pathname - Directory path to create.
+ * @returns {undefined} void
+ */
+exports.mkdir = function(pathname) {
+  if (!fs.existsSync(pathname)) {
+    fs.mkdirSync(pathname, {recursive: true});
+  }
+};

test/integration/file-utils.spec.js

@@ -4,7 +4,6 @@ var utils = require('../../lib/utils');
 var fs = require('fs');
 var path = require('path');
 var os = require('os');
-var mkdirp = require('mkdirp');
 var rimraf = require('rimraf');
 
 describe('file utils', function() {
@@ -119,7 +118,7 @@ describe('file utils', function() {
   afterEach(removeTempDir);
 
   function makeTempDir() {
-    mkdirp.sync(tmpDir);
+    utils.mkdir(tmpDir);
   }
 
   function removeTempDir() {