1.6.14

v1 Security Update: June 2021

This is a routine security update to the USWDS 1.x line.

What we did

• Updated Node to current LTS (12.13.0)
• Rewrote doc-util to remove gulp-util and run Prettier
• Replaced cssnano with csso
• Updated outdated packages
• Removed Sass linting (since we are no longer updating code)
• Reorganized dependencies and move some to dev dependencies

Results

Before

npm audit: found 1134 vulnerabilities (803 low, 84 moderate, 246 high, 1 critical) in 2320 scanned packages

After

npm audit: found 7 vulnerabilities (2 low, 3 moderate, 2 high) in 1840 scanned packages

0 vulnerabilities in regular dependencies