cyteen
/
openrowingmonitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

mitigates a dependency problem which caused an audit finding

This commit is contained in:
Lars Berning 2022-01-28 23:20:45 +01:00
parent 9471ff758b
commit 2997da6ec4
No known key found for this signature in database
GPG Key ID: 028E73C9E1D8A0B3
2 changed files with 128 additions and 343 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

464
package-lock.json generated
View File

File diff suppressed because it is too large Load Diff

7
package.json
View File

@ -39,9 +39,16 @@
"ws": "8.4.2", "ws": "8.4.2",
"xml2js": "0.4.23" "xml2js": "0.4.23"
}, },
"//fix1Comment": "version 0.5.3-8 currently does not work with bleno",
"optionalDependencies": { "optionalDependencies": {
"@abandonware/bluetooth-hci-socket": "0.5.3-7" "@abandonware/bluetooth-hci-socket": "0.5.3-7"
}, },
"//fix2Comment": "a hacky fix to not install the optional dependency xpc-connect which has a security issue",
"overrides": {
"@abandonware/bleno": {
"xpc-connect@": "npm:debug"
}
},
"devDependencies": { "devDependencies": {
"@babel/eslint-parser": "7.16.5", "@babel/eslint-parser": "7.16.5",
"@babel/plugin-proposal-decorators": "7.16.7", "@babel/plugin-proposal-decorators": "7.16.7",