Security Updates for OpenBB

[sectheops]

Pull Request for OpenBB Security

0. Security Improvements:

   • Suggesting some updates for some vulnerable dependencies in the repository.

1. Why?:

   • Not good to keep out-of-date dependencies as it can be a security risk.

2. What? (1-3 sentences or a bullet point list):

   • Some security workflows have been added to catch security vulnerabilities. Along with changes to the package.json file to upgrade a few dependencies

3. Impact (1-2 sentences or a bullet point list):

   • Having out-of-date and vulnerable dependencies can be detrimental to the security of an application. Making it easier for attackers to exploit the application.

4. Testing Done:

   • No testing needed please update and feel free not to include the new workflows that were included.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
0 out of 3 committers have signed the CLA.

❌ jit-ci[bot]
❌ dependabot[bot]
❌ sectheops
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[jmaslek]

Why is OpenBB on your website when we have never worked with you before?