ip's latest version is vulnerable and unmaintained. Our repo don't use it directly but it ships as dependency from other packages like jest, etc and these packages already shifted from ip to ip-address package because of vulnerability and it is not maintained. This PR will remove the unwanted dependencies and ip reference from our code base and also resolve CVE-2024-29415 issue.
Details
ip's latest version is vulnerable and unmaintained. Our repo don't use it directly but it ships as dependency from other packages like jest, etc and these packages already shifted from ip to ip-address package because of vulnerability and it is not maintained. This PR will remove the unwanted dependencies and ip reference from our code base and also resolve CVE-2024-29415 issue.
Motivation
CVE-2024-29415
Context
Pull request checklist
yarn test
)<rootDir>/test-results/unit/coverage
yarn precheckin
)