New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

(chore) Pin all npm dependencies. Use frozen lockfiles #241

Open

DefiCake opened this issue Aug 22, 2024 · 1 comment · May be fixed by #249

Assignees

Member

DefiCake commented Aug 22, 2024 •

edited

Loading

As part of our security strengthening efforts:

Packages must be pinned to a version (we should have tooling to enforce this) and lockfiles are a must.
npm should use flag —frozen-lockfile

DefiCake assigned viraj124

Contributor

viraj124 commented Aug 27, 2024

@DefiCake regarding the 2nd point do you mean we should update the docker file to use this flag ?

viraj124 linked a pull request

that will close this issue

Pin npm dependencies #249

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment