-
-
Notifications
You must be signed in to change notification settings - Fork 55
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix: dependabot security fixes #356
Conversation
Co-authored-by: Krystof Woldrich <31292499+krystofwoldrich@users.noreply.github.com>
@@ -9,81 +9,74 @@ | |||
* License: MIT (https://github.com/feross/buffer) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just a nit, but this file has eslint disabled on the first line /* eslint-disable */
I'm surprised that it's re formated here.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just some formatting nit, otherwise looks good. 👍
Co-authored-by: Krystof Woldrich <31292499+krystofwoldrich@users.noreply.github.com>
This PR aims to decrease the number of Security issues spotted by Dependabot, most of them do not affect users, only local builds of the SDK.
Fixes:
Removed:
Removed only packages that weren't in use or that were too old and could be easily replaced by an alternative.
codecov package: deprecated in favor of Github action: https://about.codecov.io/blog/codecov-uploader-deprecation-plan/
npm-run-all: latest update from the package was 3 years ago, replaced it by simple scripts.
rollup packages: replaced by new packages by rollup.
Code change:
yarn fix
script and also additional deprecated warnings to allow the build to pass.