Update dependencies to address high sev vulnerabilities

Consensys / web3js-eea

EEA JavaScript libraries.

Mozilla Public License 2.0

35 stars 40 forks source link

Closed vdamle closed 3 years ago

vdamle commented 3 years ago

downstream builds that use this package fail due to high severity vulnerabilities
update gitignore to include package-lock.json and delete the file in git

Verified that tests pass locally by running npm test

CLAassistant commented 3 years ago

All committers have signed the CLA.

vdamle commented 3 years ago

thanks for the feedback, @macfarla . I've restored package-lock.json and looks like the CI build is passing now.

macfarla commented 3 years ago

Thanks for the contribution!

vdamle commented 3 years ago

@macfarla - Is there a timeline for when a release with the latest changes will be cut?

macfarla commented 3 years ago

@vdamle 0.11.0 released!