bee-dashboard icon indicating copy to clipboard operation
bee-dashboard copied to clipboard

vulns reported on build

Open significance opened this issue 3 years ago • 2 comments

107 vulnerabilities (94 moderate, 11 high, 2 critical)

To address issues that do not require attention, run:
  npm audit fix

To address all issues (including breaking changes), run:
  npm audit fix --force

Run `npm audit` for details.
npm notice
npm notice New major version of npm available! 7.7.6 -> 8.5.0
npm notice Changelog: https://github.com/npm/cli/releases/tag/v8.5.0
npm notice Run npm install -g [email protected] to update!
npm notice
ip-192-168-0-57 :: Code/swarm/bee-dashboard » npmv
ip-192-168-0-57 :: Code/swarm/bee-dashboard 130 » git remote -v
origin	[email protected]:ethersphere/bee-dashboard.git (fetch)
origin	[email protected]:ethersphere/bee-dashboard.git (push)
ip-192-168-0-57 :: Code/swarm/bee-dashboard » npm -v
7.7.6
ip-192-168-0-57 :: Code/swarm/bee-dashboard » node -v
v15.14.0

significance avatar Feb 17 '22 14:02 significance

blocked by #311 (need to merge it first to avoid conflicts)

vojtechsimetka avatar Apr 18 '22 16:04 vojtechsimetka

So sadly this is actually not really trivial and the true solution is to replace the nodejs dependencies that do not have browser implementation with a browser one. This way we don't have to use polyfills and switch to react-app-rewired. See #313

vojtechsimetka avatar Apr 24 '22 12:04 vojtechsimetka