This diff fix TerserPlugin package with vulnerability and apply necessary changes due to the new version. Also applies changes to a number of packages to remove vulnerabilities.
Details
Details
- Reviewers
bytesofman - Group Reviewers
Restricted Project - Commits
- rABC6b5d4ab6f2f0: [CashTab] Fix TerserPlugin and other npm packages with vulnerabilities
On master, run "npm audit", you should see 7 vulnerabilities identified. Upon applying this patch, the total should come down to 2: one from bch-js which will be addressed in their repo since it is a breaking change. The other from babel-plugin-fbt-runtime which needs further investigation, but it is rated as a low vulnerability.
Run "npm install" and "npm start" to check if the app is working properly.
Diff Detail
Diff Detail
- Repository
- rABC Bitcoin ABC
- Branch
- cashtab-fix-npm-vuln
- Lint
Lint Passed - Unit
No Test Coverage - Build Status
Buildable 14603 Build 29165: Build Diff Build 29164: arc lint + arc unit
Event Timeline
Comment Actions
Tested with rebuilt dependencies, i.e.
rm -rf node_modules rm package-lock.json npm i --legacy-peer-deps npm start
BCHA and SLPA send work, no errors -- but package-lock.json changed