Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix vulnerable dependency of react-dev-scripts #2

Merged
merged 1 commit into from
Feb 28, 2021

Conversation

chaim1221
Copy link
Member

ref facebook/create-react-app#10411 (comment)

celiyah@ce-y720-dev:~/Code/machete/react-ui$ yarn audit
yarn audit v1.22.5
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ immer                                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=8.0.1                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ react-dev-utils                                              │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ react-dev-utils > immer                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1603                        │
└───────────────┴──────────────────────────────────────────────────────────────┘
1 vulnerabilities found - Packages audited: 1819
Severity: 1 High
Done in 1.28s.
celiyah@ce-y720-dev:~/Code/machete/react-ui$ git checkout -b ops/fix_vulnerabilities
Switched to a new branch 'ops/fix_vulnerabilities'
celiyah@ce-y720-dev:~/Code/machete/react-ui$ git status
On branch ops/fix_vulnerabilities
nothing to commit, working tree clean
celiyah@ce-y720-dev:~/Code/machete/react-ui$ yarn install
yarn install v1.22.5
[1/4] Resolving packages...
[2/4] Fetching packages...
info fsevents@2.3.1: The platform "linux" is incompatible with this module.
info "fsevents@2.3.1" is an optional dependency and failed compatibility check. Excluding it from installation.
info fsevents@1.2.13: The platform "linux" is incompatible with this module.
info "fsevents@1.2.13" is an optional dependency and failed compatibility check. Excluding it from installation.
[3/4] Linking dependencies...
warning " > @testing-library/user-event@12.7.1" has unmet peer dependency "@testing-library/dom@>=7.21.4".
warning " > material-table@1.69.2" has unmet peer dependency "@date-io/core@1.3.6".
warning " > material-table@1.69.2" has incorrect peer dependency "@material-ui/core@4.0.1".
warning " > material-table@1.69.2" has incorrect peer dependency "react@16.8.4".
warning " > material-table@1.69.2" has incorrect peer dependency "react-dom@16.8.4".
warning "material-table > @material-ui/pickers@3.2.2" has unmet peer dependency "@date-io/core@^1.3.6".
warning "material-table > @material-ui/pickers@3.2.2" has incorrect peer dependency "react@^16.8.4".
warning "material-table > @material-ui/pickers@3.2.2" has incorrect peer dependency "react-dom@^16.8.4".
warning "material-table > react-beautiful-dnd@13.0.0" has incorrect peer dependency "react@^16.8.5".
warning "material-table > react-beautiful-dnd@13.0.0" has incorrect peer dependency "react-dom@^16.8.5".
[4/4] Building fresh packages...
success Saved lockfile.
Done in 8.39s.
celiyah@ce-y720-dev:~/Code/machete/react-ui$ yarn audit
yarn audit v1.22.5
0 vulnerabilities found - Packages audited: 1819
Done in 1.12s.

@chaim1221 chaim1221 merged commit 384dd4b into master Feb 28, 2021
@chaim1221 chaim1221 deleted the ops/fix_vulnerabilities branch February 28, 2021 01:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant