mitigates a dependency problem which caused an audit finding

This commit is contained in:
Lars Berning 2022-01-28 23:20:45 +01:00
parent 9471ff758b
commit 2997da6ec4
No known key found for this signature in database
GPG Key ID: 028E73C9E1D8A0B3
2 changed files with 128 additions and 343 deletions

464
package-lock.json generated

File diff suppressed because it is too large Load Diff

View File

@ -39,9 +39,16 @@
"ws": "8.4.2",
"xml2js": "0.4.23"
},
"//fix1Comment": "version 0.5.3-8 currently does not work with bleno",
"optionalDependencies": {
"@abandonware/bluetooth-hci-socket": "0.5.3-7"
},
"//fix2Comment": "a hacky fix to not install the optional dependency xpc-connect which has a security issue",
"overrides": {
"@abandonware/bleno": {
"xpc-connect@": "npm:debug"
}
},
"devDependencies": {
"@babel/eslint-parser": "7.16.5",
"@babel/plugin-proposal-decorators": "7.16.7",