Update vulnerable dependencies from `npm audit` report

AllenNeuralDynamics / aind-metadata-entry-js

Metadata entry using javascript

https://metadata-entry.allenneuraldynamics.org

MIT License

1 stars 1 forks source link

Closed helen-m-lin closed 4 months ago

helen-m-lin commented 6 months ago

Describe the bug

There are currently 19 vulnerabilities (1 critical, 8 high, 10 moderate) shown from running npm audit
There is overlap with GitHub Dependabot alerts, tracked in #137.
5 of 19 vulnerabilities can be fixed using npm audit fix, the remainder require investigation.

To Reproduce Steps to reproduce the behavior:

Expected behavior All vulnerabilities should be resolved.

helen-m-lin commented 4 months ago

As of Apr 16, there were 9 vulnerabilities from npm audit --production and 21 from general report.

These are addressed in PR #168. All from prod report are addressed. Remaining issues for devDependencies can be ignored ( see previous PR #33 and https://github.com/facebook/create-react-app/issues/11174)