Before launching on wikidata.org (Feb 3rd), check what npm audit outputs.
Severe security issues should be fixed before proceeding with the release on the wikidata.org
Reporting on 2020-01-2
68 low, 10 moderate, 4 high
Acceptance criteria:
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Update npm dependencies of Tainted References | mediawiki/extensions/Wikibase | master | +123 -30 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T243396 Security updates | |||
| Resolved | Rosalie_WMDE | T243771 Update npm dependencies of Tainted References |
Change 569024 had a related patch set uploaded (by Rosalie Perside (WMDE); owner: Rosalie Perside (WMDE)):
[mediawiki/extensions/Wikibase@master] Update npm dependencies of Tainted References
Change 569024 merged by jenkins-bot:
[mediawiki/extensions/Wikibase@master] Update npm dependencies of Tainted References
After the change npm audit outputs:
found 65 vulnerabilities (64 low, 1 moderate) in 89827 scanned packages 64 vulnerabilities require semver-major dependency updates. 1 vulnerability requires manual review. See the full report for details.
Seems good enough for now. Thanks!
Updating @vue/cli-service at some point wouldn't hurt. But this is to be addressed later.