Skip to content
This repository was archived by the owner on Oct 21, 2025. It is now read-only.

Conversation

@ADumaine
Copy link
Collaborator

@ADumaine ADumaine commented Dec 1, 2021

Update modules to remove vulnerabilities. Upgrade to webpack v5.

zennermac and others added 9 commits July 23, 2020 14:25
Added CSP connect-src to self
Note: remaining error is a CSP error connecting to google-analytics.com.  Not sure this should be allowed since sensitive information is on the page.  TBD.
Review all modules for outdated and compatibility with each other and update those which did not cause issues.
Move development dependencies to devDependencies in package.json to clarify which are in build.
Update to webpack v5 along with associated modules. Change prod build to exclude sourcemaps.
Remove npm-check (run from global if needed) due to vulnerabilites.
Remove google analytics.
Note: react left at v16 due to some breaking changes in associated modules.
included by mistake in previous commit
@ADumaine ADumaine added dependencies Pull requests that update a dependency file security Pull requests that address a security vulnerability labels Dec 1, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file security Pull requests that address a security vulnerability

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants