Skip to content

Commit 00668b1

Browse files
authored
feat: revise axios version reasons in package.json (#287)
Updated axios version reasons for security awareness. <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Updated security advisory reference for axios dependency to current security resource. * Added configuration entry for axios version management. <!-- end of auto-generated comment: release notes by coderabbit.ai --> Signed-off-by: iola1999 <iola1999@foxmail.com>
1 parent 0197703 commit 00668b1

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

package.json

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1638,7 +1638,11 @@
16381638
"axios": {
16391639
"1.14.1": {
16401640
"version": "1.14.0",
1641-
"reason": "https://github.com/axios/axios/issues/10596"
1641+
"reason": "https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan"
1642+
},
1643+
"0.30.4": {
1644+
"version": "0.30.3",
1645+
"reason": "https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan"
16421646
}
16431647
},
16441648
"ts-gaussian": {

0 commit comments

Comments
 (0)