forks/gotty-sorenisanerd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Refresh dependencies, drop node-sass

Browse Source 
`npm audit` revealed some vulnerabilities:

```

scss-tokenizer  <=0.4.2
Severity: high
Regular expression denial of service in scss-tokenizer - https://github.com/advisories/GHSA-7mwh-4pqv-wmr8
fix available via `npm audit fix --force`
Will install node-sass@4.5.3, which is a breaking change
node_modules/scss-tokenizer
  sass-graph  >=2.2.0
  Depends on vulnerable versions of scss-tokenizer
  node_modules/sass-graph
    node-sass  >=4.6.0
    Depends on vulnerable versions of sass-graph
    node_modules/node-sass

3 high severity vulnerabilities

```

We don't need node-sass, and sass-loader is just as happy using
another sass implementation. The preferred one is dart-sass which
is simply called sass in npm.

In the process, I also did an `npm update` just for good measure.
This commit is contained in:
Søren L. Hansen
2022-08-27 01:58:27 -07:00
parent d0e3ffbb17
commit 94e587399d
8 changed files with 993 additions and 4156 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
bindata/static/js/gotty.licenses.txt
View File

@@ -26,8 +26,8 @@ bootstrap
MIT
The MIT License (MIT)
Copyright (c) 2011-2021 Twitter, Inc.
Copyright (c) 2011-2021 The Bootstrap Authors
Copyright (c) 2011-2022 Twitter, Inc.
Copyright (c) 2011-2022 The Bootstrap Authors
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal