Skip to content

Commit 1db85aa

Browse files
fix(deps): reduce npm vulnerabilities from 37 to 32 via overrides (#771)
Add npm overrides for transitive dependencies with known vulnerabilities: - minimatch: override editorconfig's minimatch@9.0.1 to ^9.0.7 (ReDoS fix) - minimatch: override filelist's minimatch to ^5.1.8 (ReDoS fix) - webpack-dev-server: override to ^5.2.1 (source code theft fix) This reduces vulnerabilities from 37 to 32 (14% reduction). The remaining 32 are all rooted in the Vue 2 ecosystem (vue, vue-template-compiler, postcss, d3-color via vue-d3-sunburst, cross-spawn via yorkie, html-minifier via html-loader) and cannot be resolved without a Vue 3 migration. Build and all 34 tests verified passing. Refs: #581
1 parent 1c7802b commit 1db85aa

2 files changed

Lines changed: 20493 additions & 38052 deletions

File tree

0 commit comments

Comments
 (0)