mirror of
https://github.com/react/react-native-devtools-frontend.git
synced 2026-10-12 17:45:49 +08:00
Brandon Walderman
f64f77e749
This change addresses 2 issues in uglify-js and socket.io-parser. See reports below for details: - https://www.mend.io/vulnerability-database/CVE-2022-37598 - https://nvd.nist.gov/vuln/detail/CVE-2022-2421 The socket.io-parser issue was addressed by running npm audit via the following command: `npm run install-deps audit fix --audit-level=critical` Since audit didn't recognize the uglify-js issue, I updated uglify-js to version 3.13.10 "manually" by adding an entry in manage_node_deps.py. running install-deps to update package-lock.json and then removing the entry from manage_node_deps.py. Bug: None Change-Id: I29238b14773a1b94b973886b0bb700f50e45cfa9 Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4061168 Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Brandon Walderman <brwalder@microsoft.com>
57 lines
1.0 KiB
JSON
57 lines
1.0 KiB
JSON
{
|
|
"name": "uglify-js",
|
|
"description": "JavaScript parser, mangler/compressor and beautifier toolkit",
|
|
"author": "Mihai Bazon <mihai.bazon@gmail.com> (http://lisperator.net/)",
|
|
"license": "BSD-2-Clause",
|
|
"version": "3.13.10",
|
|
"engines": {
|
|
"node": ">=0.8.0"
|
|
},
|
|
"maintainers": [
|
|
"Alex Lam <alexlamsl@gmail.com>",
|
|
"Mihai Bazon <mihai.bazon@gmail.com> (http://lisperator.net/)"
|
|
],
|
|
"repository": "mishoo/UglifyJS",
|
|
"main": "tools/node.js",
|
|
"bin": {
|
|
"uglifyjs": "bin/uglifyjs"
|
|
},
|
|
"files": [
|
|
"bin",
|
|
"lib",
|
|
"tools",
|
|
"LICENSE"
|
|
],
|
|
"devDependencies": {
|
|
"acorn": "~8.2.1",
|
|
"semver": "~6.3.0"
|
|
},
|
|
"scripts": {
|
|
"test": "node test/compress.js && node test/mocha.js"
|
|
},
|
|
"keywords": [
|
|
"cli",
|
|
"compress",
|
|
"compressor",
|
|
"ecma",
|
|
"ecmascript",
|
|
"es",
|
|
"es5",
|
|
"javascript",
|
|
"js",
|
|
"jsmin",
|
|
"min",
|
|
"minification",
|
|
"minifier",
|
|
"minify",
|
|
"optimize",
|
|
"optimizer",
|
|
"pack",
|
|
"packer",
|
|
"parse",
|
|
"parser",
|
|
"uglifier",
|
|
"uglify"
|
|
]
|
|
}
|