formidible, a transitive dependency of superagent, has a CVE open for it. No patch is currently available. This PR temporarily suppresses audit warnings regarding the CVE to unblock our CI. The suppressant expires in six months, at which time we will re-evaluate the CVE.
Add audit-ci config file, add temporary CVE suppressant (re-evaluate in six months)
Testing
Pull Request Type
Please select the option(s) that are relevant to this PR.
[ ] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
[x] Improvement (fixing a typo, updating readme, renaming a variable name, etc)
Description
formidible
, a transitive dependency ofsuperagent
, has a CVE open for it. No patch is currently available. This PR temporarily suppresses audit warnings regarding the CVE to unblock our CI. The suppressant expires in six months, at which time we will re-evaluate the CVE.Testing
Pull Request Type
Please select the option(s) that are relevant to this PR.