Skip to content
This repository has been archived by the owner on Nov 21, 2019. It is now read-only.

Fixed npm packages (security audit & updated module) #2054

Merged
merged 1 commit into from Sep 12, 2018
Merged

Fixed npm packages (security audit & updated module) #2054

merged 1 commit into from Sep 12, 2018

Conversation

ghost
Copy link

@ghost ghost commented Sep 6, 2018

fixes #1646

Fixed outdated npm packages without breaking changes

Before

found 53 vulnerabilities (4 low, 38 moderate, 10 high, 1 critical) in 9702 scanned packages
  51 vulnerabilities require semver-major dependency updates.
  2 vulnerabilities require manual review. See the full report for details.

After

found 6 vulnerabilities (2 low, 4 high) in 13516 scanned packages
  5 vulnerabilities require semver-major dependency updates.
  1 vulnerability requires manual review. See the full report for details.

Changes

  • Removed open dependency as it has critical vulnerability

  • Removed gulp-util as it has critical vulnerability

  • Moved dependency from babel-preset-es2015 to babel-preset-env

To-do

Maintain packages as it is already used from MyEtherWallet V5 codebase

Related issue: EthereumCommonwealth#236

@gamalielhere gamalielhere merged commit b05699d into MyEtherWallet:mercury Sep 12, 2018
@ghost ghost deleted the npm-update branch September 12, 2018 23:45
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Unused node modules
1 participant