amitwh/markdown-converter
1
0
Fork 0
mirror of https://github.com/amitwh/markdown-converter.git synced 2026-08-02 10:00:17 +05:30
Code Issues Packages Projects Releases Wiki Activity

security: fix all npm vulnerabilities

Browse Source 
- Remove unused xlsx dependency (had unfixable vulnerabilities)
- Add npm overrides to force secure versions:
  - jszip ^3.10.1 (fixes path traversal)
  - nth-check ^2.1.1 (fixes ReDoS)
  - lodash.pick -> lodash ^4.17.21 (fixes prototype pollution)

Result: 0 vulnerabilities (was 11)

Amit Haridas
This commit is contained in:
amitwh
2026-03-24 10:04:21 +05:30
parent fe4d634163
commit f81426f019
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package.json
+6 -2
View File
@@ -83,8 +83,12 @@
"pdfkit": "^0.17.2", "pdfkit": "^0.17.2",
"pizzip": "^3.2.0", "pizzip": "^3.2.0",
"simple-git": "^3.32.3", "simple-git": "^3.32.3",
"tslib": "^2.8.1", "tslib": "^2.8.1"
"xlsx": "^0.18.5" },
"overrides": {
"jszip": "^3.10.1",
"nth-check": "^2.1.1",
"lodash.pick": "npm:lodash@^4.17.21"
}, },
"build": { "build": {
"appId": "com.concreteinfo.markdownconverter", "appId": "com.concreteinfo.markdownconverter",