SSWConsulting / SSW.CodeAuditor

SSW Code Auditor V2
6 stars 6 forks source link

♻️ Update outdated and vulnerable packages #917

Closed zacharykeeping closed 2 weeks ago

zacharykeeping commented 3 months ago
  1. Updates many out of date packages, resolving every vulnerability from npm audit apart from a few in the API project that require more work to resolve.
  2. Updates HTMLHint and fixes breaking changes in its imports.
  3. Locks all versions of node to v20 (latest LTS) across the project as it's currently inconsistent and using different older versions.

The remaining vulnerabilities from the API project are related to a deprecated azure-storage package that requires migrating and refactoring to new packages. There's a PBI for this here: https://github.com/SSWConsulting/SSW.CodeAuditor/issues/918

Screenshot 2024-06-20 at 2 47 10 PM

❌ Figure: UI project previously had 9 vulnerabilities

Screenshot 2024-06-20 at 2 47 35 PM

❌ Figure: Docker project previously had 21 vulnerabilities

Screenshot 2024-06-20 at 2 44 26 PM

❌ Figure: API project previously had 24 vulnerabilities

Screenshot 2024-06-20 at 2 41 56 PM

✅ Figure: UI project now has 0 vulnerabilities

Screenshot 2024-06-20 at 2 42 16 PM

✅ Figure: Docker project now has 0 vulnerabilities

Screenshot 2024-06-20 at 2 42 49 PM

✅ Figure: API project now has 4 moderate vulnerabilities