NCIOCPL / cgov-digital-platform

The Cancer.gov Digital Communications Platform
GNU General Public License v2.0
11 stars 33 forks source link

Update code to use R4R as Generic App Module #4445

Open bryanpizzillo opened 2 months ago

bryanpizzillo commented 2 months ago

Issue description

ESTIMATE TBD

This is the cgdp peer to https://github.com/NCIOCPL/r4r-app/issues/11. This work should only be committed once production has been updated to use the generic app module.

[!WARNING] The cgov_r4r module must be uninstalled and the app module config for the R4R App modules removed from production before a code deployment missing those items is released. The easiest way is to handle the removal in 2 releases:

  • the first to remove the JavaScript, make cgov_r4r templates a no-op, disable and remove configs in cgov_application_page
  • the second is to delete the docroot/modules/custom/cgov_r4r folder.

Release 1 Tasks:

[!NOTE] The templates and webpack entry points for cgov_common appear to have been removed previously.

Release 2 Tasks:

bryanpizzillo commented 2 months ago

It should be noted that as of 20240916 npm audit shows:

156 vulnerabilities (2 low, 110 moderate, 38 high, 6 critical)

(Many of these should be resolved by r4r's removal from the code base)

bryanpizzillo commented 2 months ago

After removing the R4R package:

19 vulnerabilities (9 moderate, 8 high, 2 critical)

(which is much more manageable to resolve in a separate ticket)