Commit 1db85aa
authored
fix(deps): reduce npm vulnerabilities from 37 to 32 via overrides (#771)
Add npm overrides for transitive dependencies with known vulnerabilities:
- minimatch: override editorconfig's minimatch@9.0.1 to ^9.0.7 (ReDoS fix)
- minimatch: override filelist's minimatch to ^5.1.8 (ReDoS fix)
- webpack-dev-server: override to ^5.2.1 (source code theft fix)
This reduces vulnerabilities from 37 to 32 (14% reduction).
The remaining 32 are all rooted in the Vue 2 ecosystem (vue, vue-template-compiler,
postcss, d3-color via vue-d3-sunburst, cross-spawn via yorkie, html-minifier via
html-loader) and cannot be resolved without a Vue 3 migration.
Build and all 34 tests verified passing.
Refs: #5811 parent 1c7802b commit 1db85aa
2 files changed
Lines changed: 20493 additions & 38052 deletions
0 commit comments