You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Review and clean up Socket Security registry resolutions in package.json. We need to verify which security-related package resolutions are actually needed in our dependency tree and remove any unnecessary ones to maintain a clean dependency structure.
Technical Details
Current Socket Security registry resolutions that need to be reviewed:
function.prototype.name
array.prototype.map
string.prototype.matchall
json-stable-stringify
regexp.prototype.flags
typedarray.prototype.slice
is-weakref
is-boolean-object
Steps needed:
Check each package's usage in the dependency tree using yarn why
Verify if the Socket Security registry version is needed for each package
Remove any resolutions for packages that aren't in our dependency tree
Document which packages require the security fixes and why
Acceptance Criteria
Each Socket Security registry resolution in package.json is verified as necessary
Unnecessary resolutions are removed
Dependencies still resolve correctly after changes (yarn install works)
Security scan passes without new vulnerabilities
Documentation added for why each remaining Socket Security resolution is needed
Description
Review and clean up Socket Security registry resolutions in package.json. We need to verify which security-related package resolutions are actually needed in our dependency tree and remove any unnecessary ones to maintain a clean dependency structure.
Technical Details
Current Socket Security registry resolutions that need to be reviewed:
Steps needed:
yarn why
Acceptance Criteria
yarn install
works)References
The text was updated successfully, but these errors were encountered: