Rocketseat / eslint-config-rocketseat

ESLint configuration used by Rocketseat
https://www.npmjs.com/@rocketseat/eslint-config
734 stars 107 forks source link

Fix npm packages with vulnerability issues #10

Open gpmarchi opened 1 year ago

gpmarchi commented 1 year ago

npm audit report

json5 <1.0.2 Severity: high Prototype Pollution in JSON5 via Parse Method - https://github.com/advisories/GHSA-9c47-m6qq-7p4h fix available via npm audit fix node_modules/json5

semver <7.5.2 Severity: moderate semver vulnerable to Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw fix available via npm audit fix --force Will install eslint-plugin-react@7.25.3, which is a breaking change node_modules/eslint-plugin-n/node_modules/semver node_modules/eslint-plugin-react/node_modules/semver node_modules/semver eslint-plugin-n <=15.2.0 Depends on vulnerable versions of semver node_modules/eslint-plugin-n eslint-plugin-react 7.19.0 || >=7.26.0 Depends on vulnerable versions of semver node_modules/eslint-plugin-react

4 vulnerabilities (3 moderate, 1 high)

To address issues that do not require attention, run: npm audit fix

To address all issues (including breaking changes), run: npm audit fix --force

gcrozariol commented 1 year ago

Eu ia abrir agora mesmo esse PR. @diego3g dá um merge pra gente aí, por favor 😃