Skip to content

fix: node-fetch CVE-2022-0235 and reduce tech debt#214

Open
eboureau wants to merge 14 commits intoavadev:mainfrom
eboureau:fix-node-fetch-CVE-2022-0235
Open

fix: node-fetch CVE-2022-0235 and reduce tech debt#214
eboureau wants to merge 14 commits intoavadev:mainfrom
eboureau:fix-node-fetch-CVE-2022-0235

Conversation

@eboureau
Copy link

@eboureau eboureau commented Feb 10, 2022

This PR refreshes this project and its dependencies:

  • fix the node-fetch CVE-2022-0235 high vulnerability.
  • update node-fetch to version 2.6.7 and get rid of isomorphic-fecth
  • update prettier, eslint, nock
  • remove unused node-uuid
  • update node from version 6 to 14
  • update travis ci
  • Fix deprecated syntax of Buffer
  • Reformat code with prettier

This will address #213 and #149.

Hope you will find it useful.

@snaerth
Copy link

snaerth commented Mar 4, 2022

Any change this gets released soon?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants