Skip to content

Commit

Permalink
fix: remove unused vulnerable transitive dependency 'prompt' (#8953)
Browse files Browse the repository at this point in the history
My goal was to remove the "revalidator" dependency coming as a
transitive dependency from db-migrate. Everything seems to still work on
my machine...
  • Loading branch information
ivarconr authored Dec 12, 2024
1 parent e88cbb4 commit bdfccc5
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 85 deletions.
3 changes: 2 additions & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -236,7 +236,8 @@
"semver": "^7.6.2",
"tough-cookie": "4.1.4",
"@wesleytodd/openapi/path-to-regexp": "6.3.0",
"router/path-to-regexp": "1.9.0"
"router/path-to-regexp": "1.9.0",
"prompt": "link:./node_modules/.cache/null"
},
"lint-staged": {
"*.{js,ts}": [
Expand Down
89 changes: 5 additions & 84 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -955,13 +955,6 @@ __metadata:
languageName: node
linkType: hard

"@colors/colors@npm:1.5.0":
version: 1.5.0
resolution: "@colors/colors@npm:1.5.0"
checksum: 10c0/eb42729851adca56d19a08e48d5a1e95efd2a32c55ae0323de8119052be0510d4b7a1611f2abcbf28c044a6c11e6b7d38f99fccdad7429300c37a8ea5fb95b44
languageName: node
linkType: hard

"@cspotcode/source-map-support@npm:^0.8.0":
version: 0.8.1
resolution: "@cspotcode/source-map-support@npm:0.8.1"
Expand Down Expand Up @@ -3089,13 +3082,6 @@ __metadata:
languageName: node
linkType: hard

"colors@npm:1.0.x":
version: 1.0.3
resolution: "colors@npm:1.0.3"
checksum: 10c0/f9e40dd8b3e1a65378a7ced3fced15ddfd60aaf38e99a7521a7fdb25056b15e092f651cd0f5aa1e9b04fa8ce3616d094e07fc6c2bb261e24098db1ddd3d09a1d
languageName: node
linkType: hard

"colors@npm:^1.4.0":
version: 1.4.0
resolution: "colors@npm:1.4.0"
Expand Down Expand Up @@ -3393,13 +3379,6 @@ __metadata:
languageName: node
linkType: hard

"cycle@npm:1.0.x":
version: 1.0.3
resolution: "cycle@npm:1.0.3"
checksum: 10c0/f38aae412cea9e895e963e0ff8d4d19852e53b630e7fc1dd078da551f3a4c0a98c5f026d4626dfc0b42648b804dabf13a56faace60b09cf6f3cc706c0819f119
languageName: node
linkType: hard

"d@npm:1, d@npm:^1.0.1, d@npm:^1.0.2":
version: 1.0.2
resolution: "d@npm:1.0.2"
Expand Down Expand Up @@ -4207,13 +4186,6 @@ __metadata:
languageName: node
linkType: hard

"eyes@npm:0.1.x":
version: 0.1.8
resolution: "eyes@npm:0.1.8"
checksum: 10c0/4c79a9cbf45746d8c9f48cc957e35ad8ea336add1c7b8d5a0e002efc791a7a62b27b2188184ef1a1eea7bc3cd06b161791421e0e6c5fe78309705a162c53eea8
languageName: node
linkType: hard

"faker@npm:5.5.3":
version: 5.5.3
resolution: "faker@npm:5.5.3"
Expand Down Expand Up @@ -5296,7 +5268,7 @@ __metadata:
languageName: node
linkType: hard

"isstream@npm:0.1.x, isstream@npm:~0.1.2":
"isstream@npm:~0.1.2":
version: 0.1.2
resolution: "isstream@npm:0.1.2"
checksum: 10c0/a6686a878735ca0a48e0d674dd6d8ad31aedfaf70f07920da16ceadc7577b46d67179a60b313f2e6860cb097a2c2eb3cbd0b89e921ae89199a59a17c3273d66f
Expand Down Expand Up @@ -6875,13 +6847,6 @@ __metadata:
languageName: node
linkType: hard

"mute-stream@npm:~0.0.4":
version: 0.0.8
resolution: "mute-stream@npm:0.0.8"
checksum: 10c0/18d06d92e5d6d45e2b63c0e1b8f25376af71748ac36f53c059baa8b76ffac31c5ab225480494e7d35d30215ecdb18fed26ec23cafcd2f7733f2f14406bcd19e2
languageName: node
linkType: hard

"nan@npm:^2.19.0, nan@npm:^2.20.0":
version: 2.22.0
resolution: "nan@npm:2.22.0"
Expand Down Expand Up @@ -7687,18 +7652,11 @@ __metadata:
languageName: node
linkType: hard

"prompt@npm:^1.0.0":
version: 1.3.0
resolution: "prompt@npm:1.3.0"
dependencies:
"@colors/colors": "npm:1.5.0"
async: "npm:3.2.3"
read: "npm:1.0.x"
revalidator: "npm:0.1.x"
winston: "npm:2.x"
checksum: 10c0/f2c67178ffd82563dff958b7d9502e6346464675539158e378bd10e236093cbed395099fcfaeb5df8492b06bfd218f46f2ae75796679a127fd6705ee608e72d9
"prompt@link:./node_modules/.cache/null::locator=unleash-server%40workspace%3A.":
version: 0.0.0-use.local
resolution: "prompt@link:./node_modules/.cache/null::locator=unleash-server%40workspace%3A."
languageName: node
linkType: hard
linkType: soft

"prompts@npm:^2.0.1":
version: 2.4.2
Expand Down Expand Up @@ -7917,15 +7875,6 @@ __metadata:
languageName: node
linkType: hard

"read@npm:1.0.x":
version: 1.0.7
resolution: "read@npm:1.0.7"
dependencies:
mute-stream: "npm:~0.0.4"
checksum: 10c0/443533f05d5bb11b36ef1c6d625aae4e2ced8967e93cf546f35aa77b4eb6bd157f4256619e446bae43467f8f6619c7bc5c76983348dffaf36afedf4224f46216
languageName: node
linkType: hard

"readable-stream@npm:~1.0.31":
version: 1.0.34
resolution: "readable-stream@npm:1.0.34"
Expand Down Expand Up @@ -8172,13 +8121,6 @@ __metadata:
languageName: node
linkType: hard

"revalidator@npm:0.1.x":
version: 0.1.8
resolution: "revalidator@npm:0.1.8"
checksum: 10c0/bb324a169dfd7a6a8503861474c48da55244214391c5e3fd20e37802d9a24ea395ab57d218d26715110e6a834b3ad2dbd3db12bb35e8facaabb876093e9ade2b
languageName: node
linkType: hard

"rfdc@npm:^1.3.0":
version: 1.3.0
resolution: "rfdc@npm:1.3.0"
Expand Down Expand Up @@ -8659,13 +8601,6 @@ __metadata:
languageName: node
linkType: hard

"stack-trace@npm:0.0.x":
version: 0.0.10
resolution: "stack-trace@npm:0.0.10"
checksum: 10c0/9ff3dabfad4049b635a85456f927a075c9d0c210e3ea336412d18220b2a86cbb9b13ec46d6c37b70a302a4ea4d49e30e5d4944dd60ae784073f1cde778ac8f4b
languageName: node
linkType: hard

"stack-utils@npm:^2.0.3":
version: 2.0.6
resolution: "stack-utils@npm:2.0.6"
Expand Down Expand Up @@ -9649,20 +9584,6 @@ __metadata:
languageName: node
linkType: hard

"winston@npm:2.x":
version: 2.4.7
resolution: "winston@npm:2.4.7"
dependencies:
async: "npm:^2.6.4"
colors: "npm:1.0.x"
cycle: "npm:1.0.x"
eyes: "npm:0.1.x"
isstream: "npm:0.1.x"
stack-trace: "npm:0.0.x"
checksum: 10c0/8c6f7365955d93a78f3345db9259052fd68c64096898c5787cdd766a26555d869e56c6607db29c85733d342fe86b8e8b65862843cb751391e594752b1565a89b
languageName: node
linkType: hard

"wordwrap@npm:>=0.0.2":
version: 1.0.0
resolution: "wordwrap@npm:1.0.0"
Expand Down

0 comments on commit bdfccc5

Please sign in to comment.