Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependency Updates | February 2024 #125

Open
wants to merge 9 commits into
base: master
Choose a base branch
from

Conversation

mertssmnoglu
Copy link

@mertssmnoglu mertssmnoglu commented Feb 7, 2024

Dependency Updates on February 2024

  • Mocha bumped it's latest version 10.x from 2.x
  • Should bumped it's latest version 13.x from 8.
  • Add nyc to see the test coverages. It dependes on istanbuljs.

Updated Scripts

  • test and sample scripts supports regex patterns
  • cover and coverall scripts updated

Bonus

  • mocha-lcov-reporter bumped it's latest version, but looks like it doesnt needed anymore
  • request bumped it's latest version, but i'ts DEPRECATED
  • coveralls bumped it's latest version, but it's not Maintained
  • Added package-lock.json Missing package-lock.json #122
  • supertest and istanbul libraries are not used. Test steps can pass without them. Removed 1-2 vulnerablity.

Conclusion

Before: 26 Vulnerabiliies
20240207_17h32m32s_grim

After: 2 Vulnerabilites
20240211_13h49m25s_grim

You can check the difference with npm audit command.

@erdemdmr

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant