decentraland / snapshots-fetcher / 27587095204

87%

push

github

chore(deps): upgrade dependencies to clear security advisories (#200)

Re-resolve the lockfile to the latest versions allowed by the existing
semver ranges (package.json unchanged, so the dependency contract is
identical). This clears 246 of 248 audited advisories (yarn audit:
50 critical / 103 high / 78 moderate / 17 low -> 1 moderate / 1 low).

The 2 remaining advisories are both transitive via
@dcl/catalyst-storage -> aws-sdk (v2):
- aws-sdk region validation (low) — no patch available (aws-sdk v2 EOL)
- aws-sdk -> uuid buffer bounds (moderate) — needs uuid >=11.1.1, pinned
  by aws-sdk v2

Clearing those requires a @dcl/catalyst-storage major bump (off aws-sdk
v2), tracked separately. tsc build and the full test suite pass.

166 of 219 branches covered (75.8%)

Branch coverage included in aggregate %.

685 of 759 relevant lines covered (90.25%)

16.84 hits per line