Skip to content

fix: resolve npm security vulnerabilities#2

Open
alexZajac wants to merge 1 commit into
masterfrom
fix/security-audit
Open

fix: resolve npm security vulnerabilities#2
alexZajac wants to merge 1 commit into
masterfrom
fix/security-audit

Conversation

@alexZajac

Copy link
Copy Markdown
Owner

Summary

  • Ran npm audit fix --force to resolve npm security vulnerabilities
  • Upgraded react-scripts from 3.1.1 to 5.0.1 (breaking change, major version bump)
  • Upgraded gh-pages from 2.1.1 to 6.3.0
  • Reduced vulnerabilities from 222 to 26 (remaining are deep transitive deps in react-scripts)

Test plan

  • Verify npm start still works correctly
  • Verify npm run build succeeds
  • Verify npm test passes
  • Spot-check the app in the browser for regressions

🤖 Generated with Claude Code

Upgrade react-scripts 3.1.1 -> 5.0.1 and gh-pages 2.1.1 -> 6.3.0
to address 196 of 222 npm audit vulnerabilities (26 remaining are
deep transitive deps in react-scripts that require further migration).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant