smart-data-lake / sdl-visualization

Visualization for SDLB config
GNU General Public License v3.0
4 stars 1 forks source link

fix vulnerabilities / use vite instead of react-scripts #66

Closed zzeekk closed 7 months ago

zzeekk commented 7 months ago

Use Vite instead of react-scripts (CRA), as the later isn't updated since 2 years and includes many vulnerable libraries.

By migrating to Vite dependencies are reduced and up-to-date. The startup is much faster, and Hocon parser works.

Hocon parser is a difficult dependency to integrate, as it needs NodeJS standard libraries and corresponding polyfills when running outside of NodeJS. In the latest CRA major version (5.x) this was no longer supported, thats why we stayed on 4.x. With vite this runs very smooth.

zzeekk commented 7 months ago

Uff, found that Hocon parser is not working when building, but only in development mode. I will investigate the possibilities...

zzeekk commented 7 months ago

Uff, found that Hocon parser is not working when building, but only in development mode. I will investigate the possibilities...

Was able to fix it by patching hocon-parser module.