Dev: Update react-scripts dependency to remove high severity vulnerabilities

[mtreacy002]

Is your feature request related to a problem? Please describe.

The current react-scripts dependency (v3.4.3) is causing 2 high severity warnings

Describe the solution you'd like

Update react-scripts dependency from 3.4.3 to 4.0.3. Note: this install involves potential breaking changes. While on it, fix other vulnerability warnings as well.

Describe alternatives you've considered

Ignore warnings if they don't causing major issue

Additional context

These warnings were caught on the initial dependencies installation of a newly cloned project. Here's the gist of npm audit reports.

[Amulya-coder]

@mtreacy002 I have added the Open source hack label for the OSH aspirants

[Anmollenka]

I would like to work on this issue.

[Amulya-coder]

Assigning @Anmollenka.

[Anmollenka]

@mtreacy002 just wanted to confirm if medium severity vulnerabilities should be removed too?

[Anmollenka]

@mtreacy002 just wanted to confirm if medium severity vulnerabilities should be removed too?

@Amulya-coder Can you just confirm so that I can create a pull request.

[Amulya-coder]

@Anmollenka, Yes you can go ahead and create a pull request no need to worry about medium severity vulnerabilities.

[vj-codes]

@Anmollenka any updates here?

[Anmollenka]

Will create a pr within an hour

[Anmollenka]

@vj-codes After manually changing the versions 2 high vulnerabilities are still there.

[mtreacy002]

@Anmollenka , can you please show us steps you've done along with the log on a gist of npm audit report? This will help us better understand the issue you are facing. Thanks 😉

[Anmollenka]

sure @mtreacy002

[Anmollenka]

@mtreacy002 I updated the react version to 4.0.3 and ran npm audit.Here is the gist of the npm audit report.

[mtreacy002]

@Anmollenka , when you said you've manually changed the versions, which versions you're talking about? for example, I can't see how you've updated react version to 4.0.3 while the version stated inside package.json is 16.3.1.

can you please submit the PR with whatever you currently have so that we could see what you have done and how we can improve this? thanks

[Anmollenka]

@Anmollenka , when you said you've manually changed the versions, which versions you're talking about? for example, I can't see how you've updated react version to 4.0.3 while the version stated inside package.json is 16.3.1.

can you please submit the PR with whatever you currently have so that we could see what you have done and how we can improve this? thanks

Yes @mtreacy002 as I have not submitted my pull request you will not be able to see my changes.Sorry for the inconvenience caused by not explaining my approach properly.