rustymotors / server / 21307329255

36%

dev: 36%

Pull #2810

github

Remove coveralls npm package due to security vulnerability

The coveralls npm package has a critical CVE in its form-data
dependency (CVE-GHSA-fjxv-7rqg-78g4). Since the GitHub Action
coverallsapp/github-action@v2 can read the lcov file directly,
the npm package is unnecessary.

Changes:
- Remove coveralls from devDependencies
- Remove npm coveralls script
- GitHub Action workflow unchanged (reads lcov directly)

This resolves the security vulnerability while maintaining full
Coveralls integration functionality.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

987 of 1198 branches covered (82.39%)

Branch coverage included in aggregate %.

6785 of 20451 relevant lines covered (33.18%)

4.04 hits per line