Skip to content

chore: mute NPM audit warnings #1879

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jun 11, 2024
Merged

Conversation

shumkov
Copy link
Member

@shumkov shumkov commented Jun 11, 2024

Issue being fixed or feature implemented

├─ @grpc/grpc-js
│  ├─ ID: 1097505
│  ├─ Issue: @grpc/grpc-js can allocate memory for incoming messages well above configured limits
│  ├─ URL: https://github.com/advisories/GHSA-7v5v-9h63-cj86
│  ├─ Severity: moderate
│  ├─ Vulnerable Versions: <1.8.22
│  │ 
│  ├─ Tree Versions
│  │  └─ 1.4.4
│  │ 
│  └─ Dependents
│     └─ @dashevo/dapi@workspace:packages/dapi
│
├─ @humanwhocodes/config-array
│  ├─ ID: @humanwhocodes/config-array (deprecation)
│  ├─ Issue: Use @eslint/config-array instead
│  ├─ Severity: moderate
│  ├─ Vulnerable Versions: 0.11.13
│  │ 
│  ├─ Tree Versions
│  │  └─ 0.11.13
│  │ 
│  └─ Dependents
│     └─ eslint@npm:8.53.0
│
├─ @humanwhocodes/object-schema
│  ├─ ID: @humanwhocodes/object-schema (deprecation)
│  ├─ Issue: Use @eslint/object-schema instead
│  ├─ Severity: moderate
│  ├─ Vulnerable Versions: 2.0.1
│  │ 
│  ├─ Tree Versions
│  │  └─ 2.0.1
│  │ 
│  └─ Dependents
│     └─ @humanwhocodes/config-array@npm:0.11.13
│
└─ braces
   ├─ ID: 1097496
   ├─ Issue: Uncontrolled resource consumption in braces
   ├─ URL: https://github.com/advisories/GHSA-grv7-fg5c-xmjg
   ├─ Severity: high
   ├─ Vulnerable Versions: <3.0.3
   │ 
   ├─ Tree Versions
   │  └─ 3.0.2
   │ 
   └─ Dependents
      └─ karma@npm:6.4.1

What was done?

  • Mute NPM audit warnings until we have time to update JS dependencies

How Has This Been Tested?

Running yarn npm audit --environment production --all --recursive locally

Breaking Changes

None

Checklist:

  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have added or updated relevant unit/integration/functional/e2e tests
  • I have added "!" to the title and described breaking changes in the corresponding section if my code contains any
  • I have made corresponding changes to the documentation if needed

For repository code-owners and collaborators only

  • I have assigned this pull request to a milestone

@shumkov shumkov added this to the v1.0.0 milestone Jun 11, 2024
@shumkov shumkov requested a review from QuantumExplorer as a code owner June 11, 2024 11:43
@shumkov shumkov changed the title Chore/mute npm audit warnings chore: mute npm audit warnings Jun 11, 2024
@shumkov shumkov changed the title chore: mute npm audit warnings chore: mute NPM audit warnings Jun 11, 2024
@QuantumExplorer
Copy link
Member

As this is only for JS-SDK, it's okay for now.

@QuantumExplorer QuantumExplorer merged commit 52aff41 into v1.0-dev Jun 11, 2024
20 checks passed
@QuantumExplorer QuantumExplorer deleted the chore/mute-npm-audit-warnings branch June 11, 2024 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants