search

portalpayments / solana-wallet-names

Resolves wallet names to wallet addresses (and PFPs) across all of Solana. Includes .abc .backpack .bonk .glow .ottr .poor .sol and @ twitter.
https://getportal.app
MIT License
28 stars 8 forks source link

Update package.json #5

Closed ronnyhaase closed 1 year ago

ronnyhaase commented 1 year ago

Moved following deps to devDependencies:

rollup-plugin-node-polyfills
rollup-plugin-polyfill-node
vite-plugin-dts

I didn't test extensively! Also notice that there is a major upgrade for vite-plugin-dts to 3.2.0 available

vite-plugin-dts causes security warnings for npm audit:

# npm audit report

semver  7.0.0 - 7.5.1
Severity: moderate
semver vulnerable to Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
No fix available
node_modules/@microsoft/api-extractor/node_modules/semver
node_modules/@rushstack/node-core-library/node_modules/semver
  @microsoft/api-extractor  7.9.1 - 7.36.2
  Depends on vulnerable versions of @microsoft/api-extractor-model
  Depends on vulnerable versions of @rushstack/node-core-library
  Depends on vulnerable versions of semver
  node_modules/@microsoft/api-extractor
    vite-plugin-dts  >=1.1.0
    Depends on vulnerable versions of @microsoft/api-extractor
    Depends on vulnerable versions of @rushstack/node-core-library
    node_modules/vite-plugin-dts
      @portal-payments/solana-wallet-names  *
      Depends on vulnerable versions of vite-plugin-dts
      node_modules/@portal-payments/solana-wallet-names
  @rushstack/node-core-library  >=3.25.0
  Depends on vulnerable versions of semver
  node_modules/@rushstack/node-core-library
    @microsoft/api-extractor-model  >=7.8.12
    Depends on vulnerable versions of @rushstack/node-core-library
    node_modules/@microsoft/api-extractor-model

6 moderate severity vulnerabilities
mikemaccana commented 1 year ago

Thanks @ronnyhaase !