Merge pull request #23 from mobify/security-audit

Node Package Security Audit

Author: bendvc

.circleci/config.yml

@@ -7,7 +7,7 @@ jobs:
   build:
     docker:
       # specify the version you desire here
-      - image: circleci/node:8.7
+      - image: circleci/node:8.10.0
 
     working_directory: ~/repo
 
@@ -21,15 +21,15 @@ jobs:
           # fallback to using the latest cache if no exact match is found
           - v1-dependencies-
 
-      - run: yarn install
+      - run: npm install
 
       - save_cache:
           paths:
             - node_modules
           key: v1-dependencies-{{ checksum "package.json" }}
 
       # run tests!
-      - run: yarn test
+      - run: npm run test
 
       - deploy:
           command: |

.eslintrc.yml

@@ -7,3 +7,5 @@ globals:
   DEBUG: false
 rules:
   camelcase: off
+  no-prototype-builtins: 0
+parser: babel-eslint

CHANGELOG.md

@@ -1,3 +1,6 @@
+## To be released
+- Run security audit and upgrade offending npm dependencies. [#23](https://github.com/mobify/commercecloud-ocapi-client/pull/23)
+
 ## v0.1.9 (May 7, 2019)
 - Remove deprecated babel dependency