mirror of
https://github.com/react/react-native-devtools-frontend.git
synced 2026-10-04 11:01:37 +08:00
Brandon Walderman
f64f77e749
This change addresses 2 issues in uglify-js and socket.io-parser. See reports below for details: - https://www.mend.io/vulnerability-database/CVE-2022-37598 - https://nvd.nist.gov/vuln/detail/CVE-2022-2421 The socket.io-parser issue was addressed by running npm audit via the following command: `npm run install-deps audit fix --audit-level=critical` Since audit didn't recognize the uglify-js issue, I updated uglify-js to version 3.13.10 "manually" by adding an entry in manage_node_deps.py. running install-deps to update package-lock.json and then removing the entry from manage_node_deps.py. Bug: None Change-Id: I29238b14773a1b94b973886b0bb700f50e45cfa9 Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4061168 Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Brandon Walderman <brwalder@microsoft.com>
30 lines
798 B
JSON
30 lines
798 B
JSON
{
|
|
"name": "socket.io-adapter",
|
|
"version": "2.4.0",
|
|
"license": "MIT",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git://github.com/socketio/socket.io-adapter.git"
|
|
},
|
|
"files": [
|
|
"dist/"
|
|
],
|
|
"main": "./dist/index.js",
|
|
"types": "./dist/index.d.ts",
|
|
"description": "default socket.io in-memory adapter",
|
|
"devDependencies": {
|
|
"@types/node": "^14.11.2",
|
|
"expect.js": "^0.3.1",
|
|
"mocha": "^8.1.3",
|
|
"nyc": "^15.1.0",
|
|
"prettier": "^1.19.1",
|
|
"typescript": "^4.0.3"
|
|
},
|
|
"scripts": {
|
|
"test": "npm run format:check && tsc && nyc mocha test/index.js",
|
|
"format:check": "prettier --parser typescript --check 'lib/**/*.ts' 'test/**/*.js'",
|
|
"format:fix": "prettier --parser typescript --write 'lib/**/*.ts' 'test/**/*.js'",
|
|
"prepack": "tsc"
|
|
}
|
|
}
|