PeculiarVentures / acme-ts / 40730241599

62%

push

github

build(deps): require express 4.22 and current cors types (#77)

Raise the floors so installs can't resolve the express 4.17/4.18 chain
with known advisories (express redirect XSS and open redirect,
body-parser and qs denial of service, path-to-regexp ReDoS, send and
serve-static template injection, cookie):

- acme-express, acme-ra: express ^4.22.3
- acme-express: cors ^2.8.6, @types/cors ^2.8.19, @types/express ^4.17.25

Remove root devDependencies that duplicate the packages' own
(express, @types/express) or are unused (body-parser,
@types/body-parser), and dedupe the lockfile.

563 of 1067 branches covered (52.76%)

Branch coverage included in aggregate %.

1627 of 2481 relevant lines covered (65.58%)

41.79 hits per line