zzos/react-native-devtools-frontend
1
0
Fork 0
mirror of https://github.com/react/react-native-devtools-frontend.git synced 2026-09-28 21:24:26 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
a5fd0a412d3cab36b4bc99ab1aedf17228d1c879
react-native-devtools-frontend/node_modules/@types
T
History
Brandon Walderman f64f77e749 Update node_modules to address security vulnerabilities 
This change addresses 2 issues in uglify-js and socket.io-parser. See
reports below for details:
- https://www.mend.io/vulnerability-database/CVE-2022-37598
- https://nvd.nist.gov/vuln/detail/CVE-2022-2421

The socket.io-parser issue was addressed by running npm audit via the
following command:

`npm run install-deps audit fix --audit-level=critical`

Since audit didn't recognize the uglify-js issue, I updated uglify-js
to version 3.13.10 "manually" by adding an entry in
manage_node_deps.py. running install-deps to update package-lock.json
and then removing the entry from manage_node_deps.py.

Bug: None
Change-Id: I29238b14773a1b94b973886b0bb700f50e45cfa9
Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4061168
Reviewed-by: Benedikt Meurer <bmeurer@chromium.org>
Commit-Queue: Brandon Walderman <brwalder@microsoft.com>
2022-11-30 15:19:46 +00:00
..
babel-types
Add NPM packages for coverage instrumentations
2021-05-10 12:26:02 +00:00
chai
Update build packages
2022-01-07 14:33:50 +00:00
clean-css
Update puppeteer to v10.0.0
2021-06-11 09:22:36 +00:00
codemirror
Update Mocha to 8.3.0
2021-02-17 12:08:49 +00:00
cookie
Update unit test NPM dependencies
2022-01-07 14:26:50 +00:00
cors
Update unit test NPM dependencies
2022-01-07 14:26:50 +00:00
estree
Update all @types packages
2021-07-30 10:40:28 +00:00
filesystem
Update all @types packages
2021-07-30 10:40:28 +00:00
filewriter
Update Mocha to 8.3.0
2021-02-17 12:08:49 +00:00
glob
Add @types/rimraf
2021-05-14 16:51:40 +00:00
html-minifier
Update puppeteer to v10.0.0
2021-06-11 09:22:36 +00:00
istanbul-lib-coverage
Update build packages
2022-01-07 14:33:50 +00:00
istanbul-lib-instrument
Add karma-mocha-reporter to node_modules
2021-05-21 21:26:23 +00:00
istanbul-lib-report
Add karma-mocha-reporter to node_modules
2021-05-21 21:26:23 +00:00
istanbul-lib-source-maps
Add NPM packages for coverage instrumentations
2021-05-10 12:26:02 +00:00
istanbul-reports
Update types packages
2021-06-02 16:36:54 +00:00
json5
Update Mocha to 8.3.0
2021-02-17 12:08:49 +00:00
json-schema
Update @typescript-eslint/plugin to 5.20.0
2022-04-19 07:12:14 +00:00
karma-chai-sinon
Update all @types packages
2021-07-30 10:40:28 +00:00
marked
Update marked to 4.0.4
2021-11-24 06:28:40 +00:00
minimatch
Add @types/rimraf
2021-05-14 16:51:40 +00:00
minimist
Update Mocha to 8.3.0
2021-02-17 12:08:49 +00:00
mocha
Update all @types packages
2021-07-30 10:40:28 +00:00
node
Update types
2022-11-22 16:47:17 +00:00
normalize-package-data
Update Mocha to 8.3.0
2021-02-17 12:08:49 +00:00
parse5
Update Mocha to 8.3.0
2021-02-17 12:08:49 +00:00
parse-json
Update Mocha to 8.3.0
2021-02-17 12:08:49 +00:00
relateurl
Add rollup-plugin-minify-html-template-literals to node_modules
2021-06-02 11:00:34 +00:00
rimraf
Update types and typescript packages
2021-09-13 15:44:39 +00:00
semver
Upgrade @typescript-eslint packages
2022-11-28 11:31:39 +00:00
sinon
Update build packages
2022-01-07 14:33:50 +00:00
tern
Update Mocha to 8.3.0
2021-02-17 12:08:49 +00:00
uglify-js
Add rollup-plugin-minify-html-template-literals to node_modules
2021-06-02 11:00:34 +00:00
webidl2
Add dependencies for js signature generation to top-level node_modules
2022-02-02 17:33:42 +00:00