Skip to content

Conversation

@StefanNieuwenhuis
Copy link

A number of packages relied on older versions of lodash and mixin-deep, which resulted in 279 vulnerabilities. Ran npm audit fix to solve this.

Updated the following outdated packages:

  • eslint-loader
  • @babel/core
  • eslint-plugin-import
  • webpack-dev-server
  • @babel/preset-env
  • @babel/register
  • webpack-cli
  • webpack

"@babel/core": "^7.4.3",
"@babel/preset-env": "^7.4.3",
"@babel/register": "^7.4.0",
"@babel/core": "^7.7.4",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These changes might help developers around the globe, installing latest packages.

"@babel/traverse": "^7.4.5",
"@babel/types": "^7.4.4",
"convert-source-map": "^1.1.0",
"version": "7.7.4",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this files isn't needed to be pushed inside the repository. Please remove it.

Copy link

@sanjaypradeep sanjaypradeep left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove package-lock.json from this PR.

Stefan Nieuwenhuis added 2 commits December 19, 2019 12:48
Copy link

@sanjaypradeep sanjaypradeep left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good to go!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants