Repository navigation

Commit 5aba964

committed

fix: eliminate @tootallnate/once entirely via http-proxy-agent override

Added npm override for http-proxy-agent@^7.0.2 which no longer depends on @tootallnate/once, removing the vulnerable package from the dependency tree entirely. Result: 0 vulnerabilities (0 critical, 0 high, 0 moderate, 0 low)

1 parent 34383b7 commit 5aba964Copy full SHA for 5aba964

2 files changed

backend
- package-lock.json
- package.json

`‎backend/package-lock.json‎`

Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

`‎backend/package.json‎`

-Original file line number
+Diff line change
   "private": true,
   "license": "UNLICENSED",
   "overrides": {
 -    "@tootallnate/once": "^3.0.1"
 +    "@tootallnate/once": "^3.0.1",
 +    "http-proxy-agent": "^7.0.2"
   },
   "scripts": {
     "build": "nest build",

Comments

(0)