search

taxjar / taxjar-node

Sales Tax API Client for Node
https://developers.taxjar.com/api/reference/?javascript
MIT License
53 stars 24 forks source link

JSON-Schema Vulnerability #67

Closed jordan-k-johnson closed 2 years ago

jordan-k-johnson commented 2 years ago

Issue has been resolved with transitive dependency vulnerability for json-schema version <0.4.0 (prototype pollution vulnerability). Jsprim 1.4.2 has updated json-schema dependency to resolve this, version for jsprim is now being overridden to resolve issue with vulnerability. Also updated Mocha and ESLint to resolve additional vulnerabilities.

jordan-k-johnson commented 2 years ago

Changed ESLint to version 7.32.0 as it was including errors for TypeScript files due to reserved keywords that are not being returned in versions prior to 8.0.0