From 95be7d5def854167a391175ed64a610413fea5fc Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Wed, 5 Jun 2019 13:45:05 -0230 Subject: Successful `npm audit' run w/o some packages The following packages have been removed as I work to figure out what is causing npm audit to produce errors: eth-json-rpc-filters eth-json-rpc-infura eth-json-rpc-middleware eth-ledger-bridge-keyring eth-trezor-keyring ethereumjs-tx gaba These packages will slowly be added back in forthcoming commits. --- package.json | 7 ------- 1 file changed, 7 deletions(-) (limited to 'package.json') diff --git a/package.json b/package.json index db0b0203f..c2e4b1b8a 100644 --- a/package.json +++ b/package.json @@ -90,18 +90,13 @@ "eth-contract-metadata": "github:MetaMask/eth-contract-metadata#dc68506221859bc90792bc5e0279a6835f2484d8", "eth-ens-namehash": "^2.0.8", "eth-hd-keyring": "^1.2.2", - "eth-json-rpc-filters": "^3.0.3", - "eth-json-rpc-infura": "^3.0.0", "eth-keyring-controller": "^3.3.1", - "eth-ledger-bridge-keyring": "^0.2.0", "eth-method-registry": "^1.2.0", "eth-phishing-detect": "^1.1.4", "eth-query": "^2.1.2", "eth-sig-util": "^2.0.2", "eth-token-tracker": "^1.1.5", - "eth-trezor-keyring": "^0.4.0", "ethereumjs-abi": "^0.6.4", - "ethereumjs-tx": "^1.3.0", "ethereumjs-util": "github:ethereumjs/ethereumjs-util#ac5d0908536b447083ea422b435da27f26615de9", "ethereumjs-wallet": "^0.6.0", "etherscan-link": "^1.0.2", @@ -225,12 +220,10 @@ "eslint-plugin-json": "^1.2.0", "eslint-plugin-mocha": "^5.0.0", "eslint-plugin-react": "^7.4.0", - "eth-json-rpc-middleware": "^3.1.6", "fetch-mock": "^6.5.2", "file-loader": "^1.1.11", "fs-extra": "^6.0.1", "fs-promise": "^2.0.3", - "gaba": "^1.3.0", "ganache-cli": "^6.1.0", "ganache-core": "^2.5.3", "geckodriver": "^1.14.1", -- cgit v1.2.3 From d9614549499b2aeb290f523a509f1081b5b6e145 Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Wed, 5 Jun 2019 13:50:01 -0230 Subject: Add ethereumjs-tx dependency back --- package.json | 1 + 1 file changed, 1 insertion(+) (limited to 'package.json') diff --git a/package.json b/package.json index c2e4b1b8a..52fb38f46 100644 --- a/package.json +++ b/package.json @@ -97,6 +97,7 @@ "eth-sig-util": "^2.0.2", "eth-token-tracker": "^1.1.5", "ethereumjs-abi": "^0.6.4", + "ethereumjs-tx": "^1.3.7", "ethereumjs-util": "github:ethereumjs/ethereumjs-util#ac5d0908536b447083ea422b435da27f26615de9", "ethereumjs-wallet": "^0.6.0", "etherscan-link": "^1.0.2", -- cgit v1.2.3 From 048ac8af102911baf055d4192385545c00039482 Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Wed, 5 Jun 2019 13:58:35 -0230 Subject: npm audit: Works with eth-json-rpc-infura --- package.json | 1 + 1 file changed, 1 insertion(+) (limited to 'package.json') diff --git a/package.json b/package.json index 52fb38f46..29cec8fa2 100644 --- a/package.json +++ b/package.json @@ -90,6 +90,7 @@ "eth-contract-metadata": "github:MetaMask/eth-contract-metadata#dc68506221859bc90792bc5e0279a6835f2484d8", "eth-ens-namehash": "^2.0.8", "eth-hd-keyring": "^1.2.2", + "eth-json-rpc-infura": "^4.0.0", "eth-keyring-controller": "^3.3.1", "eth-method-registry": "^1.2.0", "eth-phishing-detect": "^1.1.4", -- cgit v1.2.3 From 3dd19bd834f1d35cee0b132db19f4adfaaa18d54 Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Wed, 5 Jun 2019 14:04:19 -0230 Subject: npm audit: Works with eth-json-rpc-filters --- package.json | 1 + 1 file changed, 1 insertion(+) (limited to 'package.json') diff --git a/package.json b/package.json index 29cec8fa2..b6fd3208f 100644 --- a/package.json +++ b/package.json @@ -90,6 +90,7 @@ "eth-contract-metadata": "github:MetaMask/eth-contract-metadata#dc68506221859bc90792bc5e0279a6835f2484d8", "eth-ens-namehash": "^2.0.8", "eth-hd-keyring": "^1.2.2", + "eth-json-rpc-filters": "^3.0.4", "eth-json-rpc-infura": "^4.0.0", "eth-keyring-controller": "^3.3.1", "eth-method-registry": "^1.2.0", -- cgit v1.2.3 From d52f319a328ea14e77d75df13d0c6abe77202bae Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Wed, 5 Jun 2019 14:10:34 -0230 Subject: npm audit: Works with eth-json-rpc-middleware --- package.json | 1 + 1 file changed, 1 insertion(+) (limited to 'package.json') diff --git a/package.json b/package.json index b6fd3208f..0153c349d 100644 --- a/package.json +++ b/package.json @@ -92,6 +92,7 @@ "eth-hd-keyring": "^1.2.2", "eth-json-rpc-filters": "^3.0.4", "eth-json-rpc-infura": "^4.0.0", + "eth-json-rpc-middleware": "^2.6.1", "eth-keyring-controller": "^3.3.1", "eth-method-registry": "^1.2.0", "eth-phishing-detect": "^1.1.4", -- cgit v1.2.3 From 41ebc2e127fe3fd06f52f312f41cc3333b83a7ba Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Wed, 5 Jun 2019 14:16:41 -0230 Subject: npm audit: Works with eth-ledger-bridge-keyring --- package.json | 1 + 1 file changed, 1 insertion(+) (limited to 'package.json') diff --git a/package.json b/package.json index 0153c349d..7b6db5300 100644 --- a/package.json +++ b/package.json @@ -94,6 +94,7 @@ "eth-json-rpc-infura": "^4.0.0", "eth-json-rpc-middleware": "^2.6.1", "eth-keyring-controller": "^3.3.1", + "eth-ledger-bridge-keyring": "^0.2.0", "eth-method-registry": "^1.2.0", "eth-phishing-detect": "^1.1.4", "eth-query": "^2.1.2", -- cgit v1.2.3 From acfd4383292416b4fb745fae9ba60d74f7a4032d Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Wed, 5 Jun 2019 14:22:01 -0230 Subject: npm audit: Works with eth-trezor-keyring --- package.json | 1 + 1 file changed, 1 insertion(+) (limited to 'package.json') diff --git a/package.json b/package.json index 7b6db5300..dde44caf8 100644 --- a/package.json +++ b/package.json @@ -100,6 +100,7 @@ "eth-query": "^2.1.2", "eth-sig-util": "^2.0.2", "eth-token-tracker": "^1.1.5", + "eth-trezor-keyring": "^0.4.0", "ethereumjs-abi": "^0.6.4", "ethereumjs-tx": "^1.3.7", "ethereumjs-util": "github:ethereumjs/ethereumjs-util#ac5d0908536b447083ea422b435da27f26615de9", -- cgit v1.2.3 From 6239d189cbe7b2e0f250a443ac35c10a1e92f3bd Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Wed, 5 Jun 2019 15:35:01 -0230 Subject: npm audit fix --- package.json | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) (limited to 'package.json') diff --git a/package.json b/package.json index dde44caf8..dc3f1de41 100644 --- a/package.json +++ b/package.json @@ -56,7 +56,7 @@ "@material-ui/core": "1.0.0", "@sentry/browser": "^4.1.1", "@zxing/library": "^0.8.0", - "abi-decoder": "^1.0.9", + "abi-decoder": "^1.2.0", "asmcrypto.js": "0.22.0", "async": "^2.5.0", "await-semaphore": "^0.1.1", @@ -122,7 +122,7 @@ "inject-css": "^0.1.1", "jazzicon": "^1.2.0", "json-rpc-engine": "^4.0.0", - "json-rpc-middleware-stream": "^2.1.0", + "json-rpc-middleware-stream": "^2.1.1", "jsonschema": "^1.2.4", "lodash.debounce": "^4.0.8", "lodash.memoize": "^4.1.2", @@ -188,7 +188,7 @@ "swappable-obj-proxy": "^1.1.0", "textarea-caret": "^3.0.1", "valid-url": "^1.0.9", - "web3": "^0.20.1", + "web3": "^0.20.7", "web3-stream-provider": "^3.0.1", "webrtc-adapter": "^6.3.0", "xtend": "^4.0.1" @@ -198,8 +198,8 @@ "@storybook/addon-info": "^3.4.2", "@storybook/addon-knobs": "^3.4.2", "@storybook/react": "^3.4.2", - "addons-linter": "^1.3.4", - "babel-core": "^6.24.1", + "addons-linter": "^1.10.0", + "babel-core": "^6.26.3", "babel-eslint": "^8.0.0", "babel-plugin-transform-async-to-generator": "^6.24.1", "babel-plugin-transform-runtime": "^6.23.0", @@ -232,7 +232,7 @@ "fs-promise": "^2.0.3", "ganache-cli": "^6.1.0", "ganache-core": "^2.5.3", - "geckodriver": "^1.14.1", + "geckodriver": "^1.16.2", "gh-pages": "^1.2.0", "gifencoder": "^1.1.0", "gulp": "^4.0.0", @@ -251,12 +251,12 @@ "gulp-uglify": "^3.0.0", "gulp-uglify-es": "^1.0.1", "gulp-util": "^3.0.7", - "gulp-watch": "^5.0.0", + "gulp-watch": "^5.0.1", "gulp-zip": "^4.0.0", "http-server": "^0.11.1", "image-size": "^0.6.2", "isomorphic-fetch": "^2.2.1", - "jsdoc": "^3.5.5", + "jsdoc": "^3.6.2", "jsdom": "^11.2.0", "jsdom-global": "^3.0.2", "jshint-stylish": "~2.2.1", @@ -271,7 +271,7 @@ "mocha-jsdom": "^1.1.0", "mocha-sinon": "^2.0.0", "nock": "^9.0.14", - "node-sass": "^4.9.2", + "node-sass": "^4.12.0", "nyc": "^13.0.0", "path": "^0.12.7", "png-file-stream": "^1.1.0", @@ -297,11 +297,11 @@ "style-loader": "^0.21.0", "stylelint-config-standard": "^18.2.0", "tape": "^4.5.1", - "testem": "^2.8.0", + "testem": "^2.16.0", "through2": "^2.0.3", "vinyl-buffer": "^1.0.1", "vinyl-source-stream": "^2.0.0", - "watchify": "^3.11.0" + "watchify": "^3.11.1" }, "engines": { "node": "8.11.3", -- cgit v1.2.3 From 13feeb25d58fab2e1558fe6a3f028b4df181b1b4 Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Wed, 5 Jun 2019 15:45:17 -0230 Subject: Break Storybook-related pkgs to reduce listed vulnerabilities --- package.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'package.json') diff --git a/package.json b/package.json index dc3f1de41..84ea52171 100644 --- a/package.json +++ b/package.json @@ -195,9 +195,9 @@ }, "devDependencies": { "@sentry/cli": "^1.30.3", - "@storybook/addon-info": "^3.4.2", + "@storybook/addon-info": "^5.1.1", "@storybook/addon-knobs": "^3.4.2", - "@storybook/react": "^3.4.2", + "@storybook/react": "^5.1.1", "addons-linter": "^1.10.0", "babel-core": "^6.26.3", "babel-eslint": "^8.0.0", @@ -216,7 +216,7 @@ "clipboardy": "^1.2.3", "coveralls": "^3.0.0", "cross-env": "^5.1.4", - "css-loader": "^0.28.11", + "css-loader": "^2.1.1", "deep-freeze-strict": "^1.1.1", "del": "^3.0.0", "envify": "^4.0.0", -- cgit v1.2.3 From c36662f3b08cefd8c36ea9c224b90488632350df Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Wed, 5 Jun 2019 15:58:57 -0230 Subject: Move eth-json-rpc-middleware into prod dependencies --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package.json') diff --git a/package.json b/package.json index 84ea52171..14cfd269d 100644 --- a/package.json +++ b/package.json @@ -92,7 +92,6 @@ "eth-hd-keyring": "^1.2.2", "eth-json-rpc-filters": "^3.0.4", "eth-json-rpc-infura": "^4.0.0", - "eth-json-rpc-middleware": "^2.6.1", "eth-keyring-controller": "^3.3.1", "eth-ledger-bridge-keyring": "^0.2.0", "eth-method-registry": "^1.2.0", @@ -226,6 +225,7 @@ "eslint-plugin-json": "^1.2.0", "eslint-plugin-mocha": "^5.0.0", "eslint-plugin-react": "^7.4.0", + "eth-json-rpc-middleware": "^3.1.7", "fetch-mock": "^6.5.2", "file-loader": "^1.1.11", "fs-extra": "^6.0.1", -- cgit v1.2.3 From 84a949b298352341eee2f53dcf2035f21dd54b1d Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Wed, 5 Jun 2019 16:28:07 -0230 Subject: npm audit: Use eth-json-rpc-infura@3 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package.json') diff --git a/package.json b/package.json index 14cfd269d..3fb11f323 100644 --- a/package.json +++ b/package.json @@ -91,7 +91,7 @@ "eth-ens-namehash": "^2.0.8", "eth-hd-keyring": "^1.2.2", "eth-json-rpc-filters": "^3.0.4", - "eth-json-rpc-infura": "^4.0.0", + "eth-json-rpc-infura": "^3.2.0", "eth-keyring-controller": "^3.3.1", "eth-ledger-bridge-keyring": "^0.2.0", "eth-method-registry": "^1.2.0", -- cgit v1.2.3 From 1ad52a878d0eb25ffa9c0902c0883e9acbadb15c Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Thu, 6 Jun 2019 11:32:18 -0230 Subject: npm audit: Break karma, 1 less low, 1 less high --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package.json') diff --git a/package.json b/package.json index 3fb11f323..cd6a24b41 100644 --- a/package.json +++ b/package.json @@ -260,7 +260,7 @@ "jsdom": "^11.2.0", "jsdom-global": "^3.0.2", "jshint-stylish": "~2.2.1", - "karma": "^3.1.1", + "karma": "^4.1.0", "karma-chrome-launcher": "^2.2.0", "karma-cli": "^1.0.1", "karma-firefox-launcher": "^1.0.1", -- cgit v1.2.3 From a1848983f838e35fd8ec60bcdd96f4c759ee743f Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Thu, 6 Jun 2019 11:58:22 -0230 Subject: npm audit: Works with gaba but w/o ganache-core --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package.json') diff --git a/package.json b/package.json index cd6a24b41..9afe65fd3 100644 --- a/package.json +++ b/package.json @@ -115,6 +115,7 @@ "fast-json-patch": "^2.0.4", "fast-levenshtein": "^2.0.6", "fuse.js": "^3.2.0", + "gaba": "^1.3.0", "hat": "0.0.3", "human-standard-token-abi": "^2.0.0", "identicon.js": "^2.3.1", @@ -231,7 +232,6 @@ "fs-extra": "^6.0.1", "fs-promise": "^2.0.3", "ganache-cli": "^6.1.0", - "ganache-core": "^2.5.3", "geckodriver": "^1.16.2", "gh-pages": "^1.2.0", "gifencoder": "^1.1.0", -- cgit v1.2.3 From 569a8e59459c0a716b1528616925f39f7645da1e Mon Sep 17 00:00:00 2001 From: Whymarrh Whitby Date: Thu, 6 Jun 2019 12:01:43 -0230 Subject: Successful `npm audit' with all required pkgs --- package.json | 1 + 1 file changed, 1 insertion(+) (limited to 'package.json') diff --git a/package.json b/package.json index 9afe65fd3..bccc23ef9 100644 --- a/package.json +++ b/package.json @@ -232,6 +232,7 @@ "fs-extra": "^6.0.1", "fs-promise": "^2.0.3", "ganache-cli": "^6.1.0", + "ganache-core": "^2.5.5", "geckodriver": "^1.16.2", "gh-pages": "^1.2.0", "gifencoder": "^1.1.0", -- cgit v1.2.3