bluehalo / node-fhir-server-core

An Open Source secure REST implementation for the HL7 FHIR Specification. For API documentation, please see https://github.com/Asymmetrik/node-fhir-server-core/wiki.
https://asymmetrik.com/healthcare
MIT License
389 stars 120 forks source link

February 2024 NPM Security Vulnerabilities Resolution #349

Closed ashin-bluehalo closed 5 months ago

ashin-bluehalo commented 5 months ago

This PR is to resolve security vulnerabilities.

Note that the Lerna package was updated from v6 => v8. As of Lerna v7, the bootstrap package management command was deprecated. We are now not utilizing Lerna's bootstrap command, and are now relying on 'yarn install' to install the dependencies for each sub-package in the project (see the new 'workspaces' field in package.json. More information can be found here).

Validation steps:

  1. yarn install
  2. yarn audit
  3. Ensure there are 0 vulnerabilities found
  4. yarn run test
  5. Ensure that all 12/12 test suites are passing

Coverage remains the same before and after changes. See below for specific coverage reports for each sub-package.

Coverage before changes:

Coverage after changes:

ashin-bluehalo commented 5 months ago

Moved to #350