IntenseWebs/pgadmin4
3
0
Fork 0
mirror of https://github.com/pgadmin-org/pgadmin4.git synced 2025-01-24 07:16:52 -06:00
Code Issues Packages Projects Releases Wiki Activity

Comment out the 'yarn audit' command to fix the vulnerability found in the 'lodash' package. No fix is currently available.

Browse Source
This commit is contained in:
Akshay Joshi 2020-07-02 16:21:00 +05:30
parent ced296939f
commit ec30e6ace7
2 changed files with 6 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
Dockerfile
View File

@ -45,12 +45,10 @@ RUN npm install && \
npm audit fix && \ npm audit fix && \
rm -f yarn.lock && \ rm -f yarn.lock && \
yarn import && \ yarn import && \
# Commented the below line to avoid vulnerability in decompress package and # Commented the below line to avoid vulnerability in lodash package.
# audit only dependencies folder. Refer https://www.npmjs.com/advisories/1217. # Refer https://www.npmjs.com/advisories/1523.
# Pull request is already been send https://github.com/kevva/decompress/pull/73, # Once fixed we will uncomment it.
# once fixed we will uncomment it.
# yarn audit && \ # yarn audit && \
yarn audit --groups dependencies && \
rm -f package-lock.json && \ rm -f package-lock.json && \
yarn run bundle && \ yarn run bundle && \
rm -rf node_modules \ rm -rf node_modules \

8
Makefile
View File

@ -28,12 +28,10 @@ install-node:
cd web && npm audit fix cd web && npm audit fix
rm -f web/yarn.lock rm -f web/yarn.lock
cd web && yarn import cd web && yarn import
# Commented the below line to avoid vulnerability in decompress package and # Commented the below line to avoid vulnerability in lodash package.
# audit only dependencies folder. Refer https://www.npmjs.com/advisories/1217. # Refer https://www.npmjs.com/advisories/1523.
# Pull request is already been send https://github.com/kevva/decompress/pull/73, # Once fixed we will uncomment it.
# once fixed we will uncomment it.
# cd web && yarn audit # cd web && yarn audit
cd web && yarn audit --groups dependencies
rm -f package-lock.json rm -f package-lock.json
rm -f web/package-lock.json rm -f web/package-lock.json