mirror of
https://github.com/react/react-native-devtools-frontend.git
synced 2026-09-30 01:07:01 +08:00
Brandon Walderman
f64f77e749
This change addresses 2 issues in uglify-js and socket.io-parser. See reports below for details: - https://www.mend.io/vulnerability-database/CVE-2022-37598 - https://nvd.nist.gov/vuln/detail/CVE-2022-2421 The socket.io-parser issue was addressed by running npm audit via the following command: `npm run install-deps audit fix --audit-level=critical` Since audit didn't recognize the uglify-js issue, I updated uglify-js to version 3.13.10 "manually" by adding an entry in manage_node_deps.py. running install-deps to update package-lock.json and then removing the entry from manage_node_deps.py. Bug: None Change-Id: I29238b14773a1b94b973886b0bb700f50e45cfa9 Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4061168 Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Brandon Walderman <brwalder@microsoft.com>
48 lines
1.1 KiB
JSON
48 lines
1.1 KiB
JSON
{
|
|
"name": "accepts",
|
|
"description": "Higher-level content negotiation",
|
|
"version": "1.3.8",
|
|
"contributors": [
|
|
"Douglas Christopher Wilson <doug@somethingdoug.com>",
|
|
"Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
|
|
],
|
|
"license": "MIT",
|
|
"repository": "jshttp/accepts",
|
|
"dependencies": {
|
|
"mime-types": "~2.1.34",
|
|
"negotiator": "0.6.3"
|
|
},
|
|
"devDependencies": {
|
|
"deep-equal": "1.0.1",
|
|
"eslint": "7.32.0",
|
|
"eslint-config-standard": "14.1.1",
|
|
"eslint-plugin-import": "2.25.4",
|
|
"eslint-plugin-markdown": "2.2.1",
|
|
"eslint-plugin-node": "11.1.0",
|
|
"eslint-plugin-promise": "4.3.1",
|
|
"eslint-plugin-standard": "4.1.0",
|
|
"mocha": "9.2.0",
|
|
"nyc": "15.1.0"
|
|
},
|
|
"files": [
|
|
"LICENSE",
|
|
"HISTORY.md",
|
|
"index.js"
|
|
],
|
|
"engines": {
|
|
"node": ">= 0.6"
|
|
},
|
|
"scripts": {
|
|
"lint": "eslint .",
|
|
"test": "mocha --reporter spec --check-leaks --bail test/",
|
|
"test-ci": "nyc --reporter=lcov --reporter=text npm test",
|
|
"test-cov": "nyc --reporter=html --reporter=text npm test"
|
|
},
|
|
"keywords": [
|
|
"content",
|
|
"negotiation",
|
|
"accept",
|
|
"accepts"
|
|
]
|
|
}
|