Skip to content

Conversation

subhankarmaiti
Copy link
Contributor

This PR removes outdated polyfills and legacy dependencies to address security vulnerabilities and improve long-term maintainability.

Key Changes

  • Removed:

    • core-js@2.x
  • Upgraded:

    • fetch-mock from ^7.7.3^12.5.3
    • node-fetch from ^2.7.0^3.3.2

Why This Change?

  • Security Compliance:
    core-js@2 and babel-polyfill are deprecated and have known vulnerabilities.

Impact

  • No runtime functionality is affected.
  • This cleanup mainly targets dev and test dependencies.

Testing

  • ✅ All CI checks are passing.
  • ✅ Ran unit tests locally—no regressions found.
  • ✅ Verified local functionality manually to ensure no runtime impact.

@subhankarmaiti subhankarmaiti marked this pull request as ready for review July 22, 2025 09:10
@subhankarmaiti subhankarmaiti requested a review from a team as a code owner July 22, 2025 09:10
@subhankarmaiti subhankarmaiti merged commit 486de09 into master Jul 23, 2025
4 checks passed
@subhankarmaiti subhankarmaiti deleted the security_fix branch July 23, 2025 16:24
@subhankarmaiti subhankarmaiti mentioned this pull request Oct 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants