ProjectOpenSea / opensea-js / 22971559577

89%

master: 30%

push

github

fix(security): redact API key from logs + audit fix dev deps (#1931)

* fix(security): redact API key from logger output

The logger serialized the full request headers including X-API-KEY,
which could expose the key in console logs, log files, or
observability tools. Strip the key before logging.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* chore(deps): npm audit fix for dev dependency patches

Resolves 8 of 10 dev dependency vulnerabilities (ReDoS in minimatch,
babel, ajv, brace-expansion, diff; prototype pollution in lodash,
js-yaml). Remaining 2 (serialize-javascript via mocha) require a
breaking major version upgrade.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

526 of 711 branches covered (73.98%)

Branch coverage included in aggregate %.

2 of 2 new or added lines in 1 file covered. (100.0%)

4763 of 5211 relevant lines covered (91.4%)

4.03 hits per line