mirror of
https://github.com/Twigpine/node.git
synced 2026-11-08 17:55:53 -10:00
Resolve Dependabot alerts for the ANS-104 golden-vector tooling in scripts/: - follow-redirects 1.16.0 -> 1.16.2 (lockfile only, within axios's ^1.16.0 range): GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8, GHSA-8r9p-f939-6h3c. - ws 8.18.0 -> 8.22.1 via an npm override. @ethersproject/providers 5.8.0 (latest v5) pins ws to exactly 8.18.0, so a lockfile bump alone cannot move it: GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx. elliptic (GHSA-848j-6mx2-7j84, low) has no patched release and is left as is. Co-authored-by: Claude Opus 5.5 <[email protected]>
16 lines
266 B
JSON
16 lines
266 B
JSON
{
|
|
"name": "ans104-golden",
|
|
"version": "0.0.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"dependencies": {
|
|
"@noble/ed25519": "^1.7.5",
|
|
"arbundles": "^0.10.0",
|
|
"base64url": "^3.0.1",
|
|
"bs58": "^4.0.1"
|
|
},
|
|
"overrides": {
|
|
"ws": "^8.21.0"
|
|
}
|
|
}
|