mirror of
https://github.com/react/react-native-devtools-frontend.git
synced 2026-10-01 01:38:07 +08:00
Brandon Walderman
f64f77e749
This change addresses 2 issues in uglify-js and socket.io-parser. See reports below for details: - https://www.mend.io/vulnerability-database/CVE-2022-37598 - https://nvd.nist.gov/vuln/detail/CVE-2022-2421 The socket.io-parser issue was addressed by running npm audit via the following command: `npm run install-deps audit fix --audit-level=critical` Since audit didn't recognize the uglify-js issue, I updated uglify-js to version 3.13.10 "manually" by adding an entry in manage_node_deps.py. running install-deps to update package-lock.json and then removing the entry from manage_node_deps.py. Bug: None Change-Id: I29238b14773a1b94b973886b0bb700f50e45cfa9 Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4061168 Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Brandon Walderman <brwalder@microsoft.com>
81 lines
2.2 KiB
JSON
81 lines
2.2 KiB
JSON
{
|
|
"name": "engine.io",
|
|
"version": "6.2.1",
|
|
"description": "The realtime engine behind Socket.IO. Provides the foundation of a bidirectional connection between client and server",
|
|
"type": "commonjs",
|
|
"main": "./build/engine.io.js",
|
|
"types": "./build/engine.io.d.ts",
|
|
"exports": {
|
|
"import": "./wrapper.mjs",
|
|
"require": "./build/engine.io.js"
|
|
},
|
|
"author": "Guillermo Rauch <guillermo@learnboost.com>",
|
|
"homepage": "https://github.com/socketio/engine.io",
|
|
"contributors": [
|
|
{
|
|
"name": "Eugen Dueck",
|
|
"web": "https://github.com/EugenDueck"
|
|
},
|
|
{
|
|
"name": "Afshin Mehrabani",
|
|
"web": "https://github.com/afshinm"
|
|
},
|
|
{
|
|
"name": "Christoph Dorn",
|
|
"web": "https://github.com/cadorn"
|
|
},
|
|
{
|
|
"name": "Mark Mokryn",
|
|
"email": "mokesmokes@gmail.com"
|
|
}
|
|
],
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@types/cookie": "^0.4.1",
|
|
"@types/cors": "^2.8.12",
|
|
"@types/node": ">=10.0.0",
|
|
"accepts": "~1.3.4",
|
|
"base64id": "2.0.0",
|
|
"cookie": "~0.4.1",
|
|
"cors": "~2.8.5",
|
|
"debug": "~4.3.1",
|
|
"engine.io-parser": "~5.0.3",
|
|
"ws": "~8.2.3"
|
|
},
|
|
"devDependencies": {
|
|
"babel-eslint": "^8.0.2",
|
|
"eiows": "^4.1.2",
|
|
"engine.io-client": "6.2.0",
|
|
"engine.io-client-v3": "npm:engine.io-client@3.5.2",
|
|
"expect.js": "^0.3.1",
|
|
"mocha": "^9.1.3",
|
|
"prettier": "^1.19.1",
|
|
"rimraf": "^3.0.2",
|
|
"superagent": "^3.8.1",
|
|
"typescript": "^4.4.3",
|
|
"uWebSockets.js": "github:uNetworking/uWebSockets.js#v20.15.0"
|
|
},
|
|
"scripts": {
|
|
"compile": "rimraf ./build && tsc",
|
|
"test": "npm run compile && npm run format:check && npm run test:default && npm run test:compat-v3",
|
|
"test:default": "mocha --bail --exit",
|
|
"test:compat-v3": "EIO_CLIENT=3 mocha --exit",
|
|
"test:eiows": "EIO_WS_ENGINE=eiows mocha --exit",
|
|
"test:uws": "EIO_WS_ENGINE=uws mocha --exit",
|
|
"format:check": "prettier --check \"lib/**/*.ts\" \"test/**/*.js\"",
|
|
"format:fix": "prettier --write \"lib/**/*.ts\" \"test/**/*.js\"",
|
|
"prepack": "npm run compile"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git@github.com:socketio/engine.io.git"
|
|
},
|
|
"files": [
|
|
"build/",
|
|
"wrapper.mjs"
|
|
],
|
|
"engines": {
|
|
"node": ">=10.0.0"
|
|
}
|
|
}
|